Introduction
Video interview
Success Stories
Charity success
The rogue
About the spammer
Bob's mental wellbeing
dmca theft
smd 'link'
(spam of mass destruction)


Court Proceedings 2008
Federal Trial coming soon

Politics
2008 Elections (WA)

Technical
The spam package
in detail
Suspected operation
Domain list
SEO pollution (NEW)

Know something ?
tell me
Spamcop sightings
Roberts home isp
Some Maps
of the above
in a new window.
Current
Recent activity
Hosting with

Fun
A Bob Soloway
spam song to sing.

Community zone
Meet Fellow 'fans'.
I post here its a
public zone instead
of my private contact
'feature' below

.
Housekeeping
How to use this page
Contact Us.
for
Media 'Professionals'
section.
Copies of this page

Welcome to the 2006
redesign of this page
the old page is still
here This page is
very large mirror and
subject to ddos attacks.
it is originally hosted here
original mirror
Welcome to the
Bob Soloway universe!
Its great fun.

I have 'migrated' from yahoo.

Enable or disable the
Search and translate
tools.

. clicking this
this can take some
time to work.

Bob Soloway (rokso spammer) in action

Search engine visitors:
This page has
lots of other junk on it
if you typed in
some vague keyword
or ip address please
use your 'find
feature' for that phrase.

So please meet
my (and probably yours too)
most prolific spammer
who does not understand
the concept of 'no'

Most links on this page
are internal - to visit
Bob Soloway site you will
have to type it in yourself.

This page documents
activities seen
in a concise* form
*in one page.

Translate this site:

or Translate words

[ hide this menu]
It can be re-displayed
again via the bottom
on the left hand menu.
This takes some
time to work.

Notice: This page monitors Bob Soloway, and is VERY BORING/DULL if your not an uber i.t nerd; but such is the nature of the subject. It's not a media 'powerpoint friendly' presentation*.

On the 24th February 2011, Robert Soloway left Federal Camp, and returned to Seattle, Washington State (near Canada on the Pacific side). His motives have yet to be determined.

Updates:
Court Sentencing (all day) is set for Seattle on Friday the 11 of July 2008. On the 14th of March 2008 Robert Soloway admitted three charges of guilt and in a deal with the us authorites had the other 37 charges droped. Sentencing with at least five years of jail time, and $ us 500,000.00 in fines is the issue for the Judge on the three counts admitted to.


Sentence is set at 47 months (about four years) and fine of $ 700,000.00 (Sterling £ 350,000.00,euro 443,044.00) more when i have court docs.

It is over!, for now. But I will continue to monitor our pest. See the date entry for more information.

Robert Soloway was released from prison until his trial on 20 September 2007, If you spot him (online or in person) please drop us a note as documents have been sealed.

Federal (usa) Trial was set for 24 march 2008, first delay was 7 January 2008 (it was orginally set for 6 August 2007). Lets hope Robert does not go to Sweden while 'free'. New Lawyer appointed 'Carl A. Tony Capozzola' existing lawyer Trobermann to take a backseat ?

MAY 31 2007 Robert Soloway (federal prisioner id 37427-086) and in the Care of Six US Governmental agencies details.

I feel your pain if you are being Joe jobbed/or where. However you can read about the Spammer below and his 'progress' through the court.

NEW HOSTING ANNOUNCEMENT: A big thank you to Andy for the new home and domain name thisfool.com and hosting for it. Note I will also continue to maintain the existing googlepages site.

Lets get started.

This page is not 'fan' literature, but an attempt to put together the facts of how Robert spams you and me. - it is not all of my own work. But an attempt to get people who are thinking of using Roberts 'services' as counter to his claims which a court has as part of the evidence against him. I've never met Robert, or used his 'service' etc - but a lot people including Microsoft (of which I'm sure you have heard of) consider him a problem. So if you thinking about taking Robert up on his offer consider this.

1. His list was not used when he spams
2. I never requested mailings from Robert - but I got them.
3. I have no idea if I am still on his list or not after opting out - its an academic point now
4. I include actual 'testimonials' from people who signed up for Roberts offer
5. Robert is using spamware to mail his junk.
6. And spamware that appears to use windows trojan; pc's
7. He hosts in China - who it appears don't mind spammers.
8. It it doubtfull that the 478 clients (not the thousands claimed) of Robert got the million plus mailings - Robert could not tell

is not me making these claims this information can be found throughout this document For the record - I just list the spams that my Domain owner email gets. Robert for some strange reason kept appearing in my inbox. So this is a 'homage' to his business operation. Should you think this just 'sour grapes' then I suggest you email some of the clients who having taken up Robert and paid him and discovered the truth. So before you send Robert money to his 'paypal' account - please read the experience of 'clients', court documents and so on. Once equipped with the facts I hope you will 'do the right thing'.

A wiki entry on Bob for those of you who like extra sources of information.

From another wikipedia contributor (June/2006):

Anyone wishing to call Robert Soloway at the Newport Internet Marketing offices, may call 206-223-1270 and 206-223-1271. He answered the phone today, and when I stated that no longer wished to receive SPAM from him, he said "Why should we care?" and then hung up on me. He stopped answering after that.

Exclusive !!! The Spam package under the hood look at the spamware, complete with photo's.

A visit is recommended (links back to this page).

Bobs 'Its not Spam' phase What about this spamis nonsense ? Those of you lucky enough to get a spamis spam (I was lucky) will know that Robert is having a go at the people who are taking him to court. I have no idea of what Bob is on but it is weird stuff. Many 'spammers' become anti-spammers when they are rumbled. Bob is still Bob - so he is still a spammer. As to Bob being 'persecuted' well if Bob thinks that way - then his 'stupidity' helped started it. That I think is a fair assessment on Spamis which a domain registrar has now terminated for breaking some rules set out in their terms and conditions.

Meeting Bob

The text below explains how I was introduced to Bob Soloway and how this page was eventually created. If you came from my spamming the domain owner (web archived now) page then you know the background. otherwise let me recap. As a domain owner In 2002 a couple of domains I look after changed registrar, so this meant the all contacts in the whois database changed.

The whois lists information about the owner and the technical contacts various internet rfc's (who the internet is ideally run) require you have these so people can contact you.

The downside of this ideal system is that spammers can also spam you as most domains not owned by spammers follow the rules. Since spammers can joe-job you it is best not to have filters on these email accounts as it might be a another domain warning you that a spammer is using your domain name (if you don't know it already) So the billing, technical, and administrator plus the owner contacts changed in the year 2002 - for good measure a web page was setup advising persons of this. In June 2004 Bob who was then using 'Broadcastingtoday.biz' raided the whois by some means and decided to send me spam, then to all of the accounts I created in 2002. which is nice of them since these accounts don't send email. Enough history - lets move to 2004.So in June 2004 I got spammed via my whois entries so I renamed a few things and started my experiment. I then also renamed the billing and technical contacts. they have since rescanned the whois and have sent spam to these new names this has become experiment 2 (also web archived). No web page was put up with the changes so they are definitely raiding the whois for there claimed and 28 million email addresses. That's how Bob Soloway introduced himself. with this (archive link)

Email Advertise to 28 Million People Free

http://www.broadcastingtoday.biz emailing is only zero amount if you are a non profit organization
that aids low income individuals gain access to the internet.
at web site, contact us by mail for further details.

unsubscribe from our non-commercial/non-profit newsletter database:
http://www.broadcastingtoday.biz/unsub.html

po box 1259, seattle, wa 98111

The 'love affair' of tracing Bob's spam started back then - thus this page of love was born.

Bob reciprocated my love my sending me more spam (see the link). and before one knew it I had a lovers crush - I've yet to do the Glen Close - Fatal Attraction 'bunny boiling' stage. - I would not want to be Bob's boyfriend or girlfriend (whatever his sexual orientation) when the Bunny Boiler state comes.

The more you know the funnier Bob gets - his claim to 'protecting american jobs' is code for using anything but americans in his operations, the Charities success rate from what I can gather is a complete failure and may be mostly lies.

A Spam

What does a Bob Soloway spam look like ? - well you seen one, and more importantly where might it come from ?

Most 'normal' internet citizens live in a neighbourhood e.g. 24. is america 211. is Korea etc etc, Bob is international in fact if you look at my lists you will see computers in many nations unwittingly working for Bob.

The spams to the domain aliases are similar to the experiment (see link) I am running this is the 'body' of a freshly subscribed address from my whois entry - a later spam example from the 15th September 2004.

message: 

email like this to 28 million people for free...

http://www.broadcastingtoday.biz



---------------- 
 
this email was sent to gain attention to non-profit 
organizations that aid low-income individuals gain
access to the internet and technology looking for 
immediate exposure.  we make no profit on any of
these services, and we offer this service to help
organizations benefiting impoverished individuals
gain access to the internet throughout the world.

emailing is only zero amount if you are a non-profit 
organization that aids low-income individuals gain 
access to the internet.  at our web site above, simply  
contact us by mail for further details.

the primary purpose of this email is directed at non-profit
organizations that benefit low income individuals gain access
to the internet and technology in all countries worldwide.

several organizations worldwide have already taken
advantage of our free offer, and we look forward to 
benefiting many more in the future.

if you are not a non-profit organization interested in our 
non-commercial/non-profit email notifications that benefit
various world causes, please unsubscribe at: 

contact us at: po box 1259, seattle, wa 98111

(look familiar?) - you now seen two spams. They are consistent in there attempts to spam me, since i have not unopted from the billing and technical contacts the spam is less than from the owner email which has had 30 ish spams after opting out of the Broadcastingtoday.biz list. Surprisingly Robert does not appear to spam webmaster or postmaster accounts - but I'm sure that will change one day.

Over time that number has dwindled to only 8 million this is a recent example of the current text forwarded by a fellow domain owner, the domain below was shut down in 2 days after being activated.

wow...

email advertise like this to 8,000,000 people this week for free...

http://www.ebroadcastcorporation.com/






the above non commercial offer is directed at non commercial
charities only.  push charity info on site for details. this offer is
not a commercial service that is absolutely not at all available
for sale or lease or trade of any kind.

That last paragraph is humorous - so my domain owner friend according to Bob is a charity, however Bob will sell the list to anybody including pet companies and it related products (see below), No endorsements by charities is implied either it appears if you read the appropriate section of this file.

One can infer.

• no means yes!
• spam is approved by charities
• your going to get Bob Soloways spam regardless.
• don't see a opt-out link - no we don't either - it would not make any difference anyhow - this confirms Bob is a spammer in our eyes.

Success Stories

Read some quotes from dissatisfied customers. None of these are made up. Roberts clients apparently include these highly reputable areas of trading in:

• lottery scam merchants (advance fee fraudsters)
• internet pharmacies
• Nigerian 419 advance free fraudsters
• Western Samoa internet 'timeshare' / get rich quick scheme
• 'Cheap' software suppliers
• contentseed.com (see pdf document)
• you don't believe me or want me to continue ? - go see the experiment pages

Robert's 'Clients' also seem to include
http://success-4-u.biz/?refid=BcastEmail-123456789 affiliate: Helen Allen, Hamilton Island, Queensland, Australia and Poochieheaven.com (real) recommends Bob

I got fooled and payed for Soloways broadcast email that was supposed to be all opt in. Well now I have nothing but complaints about spam and am receiving virus' in my email all the time. 

I asked for a refund but they said no. Still I get complaints about emails being sent out after I told them to stop sending them. So I wonder what can we do about this. 
My business has slowed so much and I think my site's reputation is at stake.

US Court document copy

Contentseed client experience pdf document.

Print to discover what a Bob Soloway client found out, and that the American Judge thought print a copy / browse for your amusement. Pdf documents do not need the latest acrobat driver (old style pdf). Any Lawyers (legal people) whom be reading this and are still thinking c**** action should read Bob response to such things on newsnet. I'm not giving it anymore propaganda. So go chase ambulances that is more profitable from what i know of the american legal profession.

Its not only me (wiki quote from the past):

The most recent incarnation of this Spammer's website has now moved to http://www.web-dateset.com/ - and they are once again forging headers to make it appear as though legitimate business websites are responsible for their SPAM messages. The author of this update, wishing to draw no further attention from the SPAMMER, will remain anonymous, but we have received about 200 messages in the last 2 days, supposedly from over 200 of our own domain names Anyone wishing to call Robert Soloway at the Newport Internet Marketing offices, may calll 206-223-1270 and 206-223-1271. He answered the phone today, and when I stated that no longer wished to receive SPAM from him, he said "Why should we care?" and then hung up on me. He stopped answering after that.

Broadcastemail advertising is a failure. says yet another client

Karma There are other problems that Mr Soloway will encounter, he has interested me in 'how does he do it'. This page regardless of your view of 'spam' links Mr Soloway to many domains (joe jobs) and providers of it services (mostly Chinese).

So should somebody else do something 'bad' - and google and see that Bob has used it - one might come to the conclusion that Bob is one very bad apple. take an email i received about a Nigerian in October 2006 - let me explain.

A Nigerian named Ghenga Olanrewaju of 11 Odeku Close, Surulere, Lagos 23401 used a domain that Bob Soloway used. An inference by somebody else assumed that he was 'Bob' was made. So is Bob 'Ghenga'? I don't think so, but if you play loose with things like has been observed and documented with Mr Soloway then our Robert it appears also takes the rap for another crook apparently named: 'Ghenga Olanrewaju'.

That's sort of 'karmic'. Also moral in there. Something along the lines of 'responsibility' see if you can find it.

Charity work

Charity Time boys and girls, for those of you who really 'read' the Soloway spams will notice that there are a lot of charities listed. So does his charity spam work ? - it seems not. Bob was also Tsuna-ming too at the time.

For your benefit I have gone and done some 'Googling' and put in the the urls, these are perhaps charities you might like to avoid donating to, Some of these are large organisations. A lot of these take credit cards via websites for what its worth, so it may mean that the donation was for not a lot and the charity mention Bob claims means absolutely nothing as well.

Questions I like to know include:

1. how large the donation was
2. or if Bob really donated to them
3. and do they approve of being listed in a Bob Soloway spam

I have asked each charity listed in the Bob Soloway spam that exists. Strangely none of these esteemed organisations answered my questions about Bob if you can find out as well so much the the better

Charities 'Claimed' he Helped ? with a $1 dollar donation ?

More recently - Sky (opsan december 2006) reports savechilds.net being spammed.

The Rogue
Bob Soloway inhabits a strange universe of which i have spent much time writing (8000 lines in this file) down/finding out. My aim is to present a picture which Bob would rather you not see.

Bob causes problems - through annoyance to the downright illegal, when these issue arise The fun begins. Under a couple of hours for a web host says much.

has more detail and graphic examples from isp's that say more just words.

The Spam Operation
Pure speculation on the basis of the facts seen from this page you can assume quite a lot/

Being subscribed:
1, Spam Victim: registers an internet domain
2, Bob Soloway: Hires help, or looks up what was entered in step 1, either using a mining tool, or a box of spyware/virus spybots pc that mask the number of requests for ahem 'sales leads' like email addresses.

Being spammed:
1, Bob Using non american internet companies (normally Korea, or China) Bob sets up the same website over and over again.
2, Bob uses/or employs help or his own.
1 Spybot network - example (bbc) or 2 open proxy Microsoft windows exchange servers to send (example ip addresses here)

Internet Mail Service (5.5.2650.21) from here - seems to be classed as an 'Exchange Open Proxy' abuse in Google - Never used a exchange server as an production mail server for obvious reasons. If true then its an illegal use of somebody else's server, and Bob loves Billy Gates products to spam spybots which is funny since the 'spamis' debacle done by Bob and covered here in this page.

The other query I had was for %XMAILER - is ?

xmailer - xmailer.exe - Process Information

Process File: xmailer.exe
Process Name: 123 hidden sender


Description: xmailer.exe is an advertising program by 123 hidden sender. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.


A further search in Google reveals

Anonymous bulk email software for email marketing, 123 Hidden Sender Real anonymous bulk email software, Super Email Harvester, extractor, harvester for online advertising, marketing. www.123hiddensender.com/

Download 123 Hidden Sender 3.40 Free Trial - 123 Hidden Sender ... Download 123 Hidden Sender 3.40 for free - 123 Hidden Sender ends real ANONYMOUS bulk emails.

Comrades search on "123 hidden sender" I rest my case. with this

" Sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP will will never be shown in the email headers.

Description

123 Hidden Sender Screenshot
View full-size screenshot


123 Hidden Sender sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP address will not be shown in the email headers! All you do is input your message, subject, and email addresses, and then 123 Hidden Sender does all the rest. No relays to deal with anymore. No need for expensive bulk ISPs. Port 25 is not a problem.

123 Hidden Sender is a anonymous bulk email software program based on a unique know-how sending technology. It provides real anonymous instant delivery - you can use your regular Internet connection because your IP address will never be shown in the email headers.

Feature and Benefits

Send absolute ANONYMOUS bulk emails. Real anonymous (using proprietary proxy routing - the next wave in bulk email stealth technology, New technology, not a conventional port 25 mailer). You will not lose your ISP service. Your IP will will never be shown in the email headers. Sending speed depends on your connection only (thread count control - up to 500).

Lowest prices.
Free client software.
All required data client software retrieves from our center automatically (no more hunting for relays or paying hundreds ofdollars for open relays). No port 25 needed (not affected by port 25 blocking ISPs). No SMTP servers needed.
Free support, Free upgrade. "


The pot calls the kettle black. From a list of emails for Bobs list and the emailer iding itself as MIME-tools 5.503 (Entity 5.501)
Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I)
Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)


his spam using Darkmailer.

Trying to unsubscribe: 1, Means you get even more spam - a 'feature' yet to developed by Bob - well you wanted spam didn't you ? or a misunderstanding of the word 'no' really means 'yes'

Other things Bob does well:

1. Autocreation of yahoo geocities (free webspace) aliases/accounts that link to websites if Bob is having problems (I am only using for Bob dataset examples only here, other spam that employs the geocities redirect I would not make the call about) I assume a script of some kind is run

If you think I'm being unfair Going back to broadcastingtoday.biz (old) Bob is known to 'lose' half million email addresses in his latest spam (experiment 1 item 75) but I'm afraid I'm not one of them. Then (on the 1st October) However good news he's back to 28 million addresses. So it seems one can never 'get off'

Lets be 'Geeky' and take a look at the mail.log file:

01/10/2004 03:11:54 PM  pD9E51757.dip.t-dialin.net (217.229.23.87) connected
01/10/2004 03:11:59 PM  Message 004E0061 (MessageID:
<JIUQTKJMWASOTLWYPXCURQ@fastestresponse.net >) received from
pD9E51757.dip.t-dialin.net (217.229.23.87) size 2466 bytes

01/10/2004 03:11:59 PM  SMTP Server: pD9E51757.dip.t-dialin.net
(217.229.23.87) disconnected. 1 message[s] received

01/10/2004 03:11:59 PM  Attempting delivery to: User
billing@Domain.name, admin@Domain.name admin@Domain.name from
donc@boardermail.com

RANGE 217.224.0.0 - 217.237.161.47
netname: DTAG-DIAL15
descr: Deutsche Telekom AG
country: DE
remarks: ******************************************************************
remarks: * Abuse Contact: http://www.t-com.de/ip-abuse in case of Spam, *
remarks: * Hack Attacks, Illegal Activity, Violation, Scans, Probes, etc. *
remarks: ******************************************************************
source: RIPE
details about them
route: 217.224.0.0/11
descr: Deutsche Telekom AG, Internet service provider
address: Deutsche Telekom AG D-90492 Nuernberg Germany
phone: +49 180 5334332, fax-no: +49 180 5334252
e-mail: abuse@t-ipnet.de

04/10/2004 10:46:40 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) connected
04/10/2004 10:46:50 AM SMTP Server: Message 0035B9F2 (MessageID: <15910kqk7432peji$23698272w846$053kt177thb720@pituitary>) received from 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) size 2434 bytesbeing cheap

04/10/2004 10:46:51 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) disconnected. 1 message[s] received

I will update this when new Junk from Robert comes in - Just that he loves sending me this 'gold'. Further proper examples of Roberts spams (and to view his 'fortune 100 client' list) can be seen in experiment 1 , and experiment 2.

Domain Owner spam,

I've done some fun stuff with spam they get, but its time to stop but i will continue to list Bobs spam here

nice... 

email advertise like this to 8,000,000 people this week for free..

http://www.broadcastemailinc.com/






the above noncommercial offer is only for noncommercial
charities only.  press on charity info on our web site for full
and complete details. this offer is not a commercial service 
and is not at all for sale or lease or trade of any kind.

    ??-Received: f338169d6d4450e3f72c2fa47c4e86b6ecf9322e
Delivered-To: ?@gmail.com
Received: by 10.78.123.3 with SMTP id v3cs31932huc;
        Tue, 11 Jul 2006 08:17:10 -0700 (PDT)
Received: by 10.36.118.8 with SMTP id q8mr7333176nzc;
        Tue, 11 Jul 2006 08:17:09 -0700 (PDT)
Return-Path: < me @gmail.com>
Received: from adsl-68-88-212-155.dsl.rcsntx.swbell.net (adsl-68-88-212-155.dsl.rcsntx.swbell.net [68.88.212.155])
        by mx.gmail.com with SMTP id c12si2063739nzc.2006.07.11.08.17.08;
        Tue, 11 Jul 2006 08:17:09 -0700 (PDT)
Received-SPF: neutral (gmail.com: 68.88.212.155 is neither permitted nor denied by domain of gmail.com)
X-Message-Info: ONZUqZXI77morFicuQZzx921iwq489JQW73QZXpcyMc
Received: from hf2.freenet.de (168.104.239.56) by qzo251-p.inet.com.ua with Microsoft SMTPSVC(5.0.2195.6824);
	 Tue, 11 Jul 2006 20:09:04 +0400
Received: from inclusivesculpttvv500 (bouffant108.154.239.136)
          by sunpoint.net (bgsetw246) with SMTP
          id <123175477641887w0prg>
          (Authid: BillyPlatt);
          Tue, 11 Jul 2006 15:16:04 -0100
From: "me @gmail.com" <me @gmail.com>
To: "me " <me @gmail.com>
Subject: me
Date: Tue, 11 Jul 2006 11:11:04 -0500
Message-ID: <327f214vr629$44cio50f399$524sj88eazg@mediterraneandao699>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--30278814625304915155"

----30278814625304915155
Content-Transfer-Encoding: quoted-printable

<HTML>
<HEAD> STYLEBODY {FONT-FAMILY: "Arial"}TT {FONT-FAMILY: "Courier New"}BLO=
CKQUOTE.CITE {PADDING-LEFT: 2.6em; MARGIN: 0px; BORDER-LEFT: 0px solid}
SPAN.TABOOHEADER {DISPLAY: none} </STYLE> <META content=3D"MSHTML 6.00.2712.=
300" name=3DGENERATOR </HEAD> <BR> <BR>
<body bgcolor=3D#6666FF> <table bordercolor=3Dwhite cellSpacing=3D0 cellpad=
ding=3D0 width=3D750 align=3Dcenter bgcolor=3D#ffffff border=3D2 tbody t=
r td bgcolor=3D#003399 div align=3Dcenter table cellspacing=3D0 cellpad=
ding=3D10 width=3D"100%" border=3D0 tbody tr> td bgcolor=3D#000000>div =
align=3Dcenter> <B 
BR> <a href=3D"http://www.emarketingcorp.cn/"> <img src=3D"http://static.fl=
ickr.com/46/124948285_d9671caeb7_m.jpg"> /I
font face=3D"arial, helvetica, sans-serif" font size=3D2 color=3Dgray B=
R> BR I Charity/Non-Profit Organization Contact Only:br font color=3Dwh=
ite size=3D4>font color=3DwhiteLet The World Know About Your Organizatio=
n...BRa href=3D"http://www.emarketingcorp.cn/"></I><font color=3Dyellow=
><BR><font size=3D10>Click to Advertise Your Site toBR8,000,000 Internet=
 Users/Afont color=3Dwhite>
<font size=3D5><font color=3Dwhite><br>...Starting Within 24 Hours!<br>
<br>font color=3Dred> b>font color=3Dyellow>=3D> u>a href=3D"http://w=
ww.emarketingcorp.cn/">font color=3Dred> F-R-E-E TODAY ONLY/A>/U> font=
 color=3Dyellow><=3DBRBRfont color=3Dgray>font size=3D1>/U>ICLICK=
 ON "CHARITY INFO" ON OUR CORPORATE WEB SITE FOR FULL DETAILS ON THIS NON-=
COMMERCIAL OFFER.BR/UThis Non-Commercial Email and Non-Commercial Emai=
l Offer Have a Primary Sole Purpose to Assist Charity & Non-Profit Organiz=
ations Only.BR
/body /html
----30278814625304915155--

Return-Path: <JanellWeeks3@montevideo.com.uy>
Received: from Q-SI3TG06W0SN5N (eu100-163-8.clientes.euskaltel.es [82.130.163.8])
Received-SPF: fail (gmail.com: domain of JanellWeeks3@montevideo.com.uy does not designate 82.130.163.8 as permitted sender)
Received: from wrneer4.atlas.cz (211.88.172.41) by ox3-ckl.zmail.ru with Microsoft SMTPSVC(5.0.2195.6824);
From: "Customer Support Department" <JanellWeeks3@montevideo.com.uy>

* for the record our email boxes blocks any email request sent to it from south korea, or china - it solves the volume of spam problem for us, if you thinks that is hard - i suggest you ask to see the log file, china and korea love to fake whats they spend most of their  time sending - which is spam willingly, or unwillingly

Both take spammers money too.

Domains
Bob Soloway used to kep the domain registrars busy that is until even they got fed up with him, He has essentailly been denied the rights to register internet domains like .com/org/biz - that leaves him the the strange position of making work for the chinese registrar of .cn (chinas) internet domain name whom we all know love spam persons like Mr Soloway. - remember China hates spam not.

The list of domains that advertise Bobs spam are

IP addresses have been used, and yahoo redirects en mass to, .cn (China) is is currently his home in Cyberspace. Which is ironic becuase Bob likes to hire Americans - he just is not tolerated to.

So he's been around -

Current Operations

Host's operational now. You are looking for these zombies or the (original revised design. Those of you wondering where this design came from see the dmca theft section - 'fancy some spam for lunch') The text changes but the red text is an offer day, and no red text is full price sucker day.

	or the original 'new site' redesign
	Plus the classic - (old) the Bald deaf "SPEAK UP" eagle site design was used for cut price offers (left hand) - notice the lack of domain name too in the screen dump above. If you where one the 28 million spammees your probably still on the list. note: All images can be printed (link to image files in new browser window) full size if you desire it in png graphic format. Bob Spam Frieindly Isp's by region

Old Domains

Y

text in red denotes a remote observation from a report i've seen Remote report column denotes the email address could not be determined by myself (but the spam was deemed to be a Bob 'classic') .

- Red seen by others
- Black This information is observed by me alone - if you google hard enough im sure others will confirm these findings.

Search Engine Pollution

I am writing this but this appears to be new area for Robert Soloway - two domains for far submitmenow and nim-company - allow me think and flesh out with tables and other stuff see the 25 January 2007 blog entry if your impatient.

1. submit-me-now.com
2. nim-company.com

updates: There seems to be some questioning on the validity of these domains, but since seo's are spammers of garbage i see little reason to remove them.

As of the 1st August 2008 both these domains are 'defunct'.

Speaking of seo - I don't see a need for it, not that i care about ratings.

Whats Happening Now.

next

Building...

MAPS (finished): Latest map map3e Robert Soloway Map's . Visit some spambots and take a tour of Robert Soloways old haunts.

.

.

Where is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293 The Robert Soloway Locator url.

20 October: new home in Sheridan,OH Robert whom is now known as 37427-086.

A website by Michael Santos describes 'Sheridan' as:

The Federal Correctional Institution at Sheridan is part of a complex that holds three separate institutions. The complex is located about 90 miles south of Portland, Oregon, and those who serve time there enjoy the temperate weather of the Pacific Northwest. Most of the prisoner population comes from the Northwest and California. The medium-security FCI confines more than 1,500 men inside double fences that are separated and capped with coils of glistening razor wire. Inside the prison, the men are housed in one of eight housing units. Each housing unit holds between 150 and 200 prisoners. They are not allowed to spend time visiting in other housing units, though the men may congregate in small numbers on the recreation yard, in the education building, in the chapel, or during meals in the main chow hall. Adjacent to the medium-security FCI is a minimum-security camp that holds about 500 men. The men in the camp are held in relative freedom, as no fence confines them. They serve time under the honor system, and most complete their time in the camp without incident.

Which is not the life he is used to.

Somehow i doubt that Soloway will 'never never ever' spam again in some form or other so see you all in the future. Signing off - bananas in the falklands.

25 September: In http://deepbackground.msnbc.msn.com/archive/2008/09/22/1432186.aspx Do a short piece on Soloway before prison (24 September 2008). It's a more polished than the below interview during the sentence hearing and a copy of the 'deep' interview has been retained for future airing once nbc get bored and delete there content.

Soloway in in Federal care and 'in transit' sine 24th September to where ever he ends up. More soon, same prisoner number as before.

5 August: Comrade Vanessa Ho at Seattle Pi inorms us the 22 September is Roberts report date to be looked after by the federal government. Robert continues to put his foot in it.

He spends much of his time in the company of his lawyer, Richard Troberman, who declined to comment.   His posh Harbor Steps penthouse is long gone, exchanged for a small studio in the same downtown building.  I look back now; I never said 'bye' to a single person, he said of his Oregon days. In 2003, he wanted to start over and moved to Seattle with his cat, Simba. Vowing to scale down his business and spending, he wanted to go to museums, "get cultured"

That seems to discount Mr Tony Capozzola's account of who wears the trousers in this case from the Daily Breeze reporters story. And we know some of the motivations of the Seattle move now.

I dont quite get the association of being toy product seller on the internet makes you turn into being a vile spammer but then i must be plain dumb.

I wonder who gets to look after Simba ?

29 July: A video page has been created it can be accessed from most of the top menus on the site. A preparation of the words spoken by Soloway is also provided along with the moving pictures and audio if you find words better than trying to translate a non queens english accent. The words can be translated easier too into foriegn languages without it becoming a just a stream of words.

Mistakes are mine alone but thats what i heard Soloway speak, corrections to my text are welcome. I present the words as he spoke them and reserve observations on them for later. - You all know my views on the subject and its best to dig your grave and Soloway knows how to do that without needing our 'help' .

Lots of more updates i'm afraid. In the court page we have 2ndSupSentMemoSoloway.pdf 1stSupSentMemoSoloway.pdf and 1stSupSentMemoGovt.pdf which come from spamsuite.com dealt with the court page. IT IS NOT BORING

testimony of Steven Collins, proving that on a single day on which Soloway used the server he had rented (fraudulently) from Liquid Web to send fraudulent e-mails, he was initiating 4,468,306 such transmissions, at the rate of 71,882 per hour (and using 3001 proxy computers to do so.)

Not co-operating either with previous judgements - NOT BORING snipet

At almost 30 years of age, Soloway doesn’t work to pay for those luxurious accommodation; he doesn’t need to because his parents pay all his bills. The government notes that during the same 14 month period since his arrest, Soloway has made not one penny of payment in restitution to any of his victims - many of whom are known to the ...

We have video, and a interview and transcript of what robert said ouside courtfor those of us who like to digest the words and dont have the verbal road runner comprehension for even i find Mr Soloway belted out those words.

Court action is not yet over, i have seen no complete court report, and the restituion hearing is still to be heard - doj press release.

A contact informs me that Robert Soloway's website was indeed a template, since most of his site did not work quite where Mr Soloway paid for the the template, or could fix it is a point of discussion too.

Soloway takes Klonopin drug, that is not available in federal prison hence the 60 day stay of sentence.

24 July: Restition court sitting to come. Sorry no court transcript from the horses mouth yet but press coverage in this

The case has been closely watched because only a few such spam cases have ever been tried. A man named Jeremy Jaynes was sentenced in Virginia earlier this year to nine years in prison for his spam crimes, and Adam Vitale got slightly more than two years for a recent conviction in New York.

The prosecution argued that Soloway should get more prison time than any of the previous spammers, asking for a sentence of seven to nine years. "None of those cases, not one, comes close to this case in terms of the duration of the maliciousness, the harassment techniques, the high level of spamming activity that we have in this case," said assistant U.S. attorney Kathryn Warma.

However, compared with some other notorious spammers, Soloway deserved some leniency, his attorneys said. Soloway didn't damage anyone's computer, he didn't send out malicious code, and he never directed people to pornography, as some spammers have done, his lawyer Richard Troberman said. Jaynes, for example, had millions of AOL e-mail addresses that were stolen from the ISP (Internet service provider), and he was earning as much as US$700,000 a month from his activities, Troberman said. By comparison, the government figured conservatively that Soloway earned more than $700,000 in three years.

But the Soloway case was an opportunity for the courts to dissuade online criminals from continuing their work, Warma said. "A disturbing theme we repeatedly saw from the complainant is, why isn't the law being enforced on the Net? Why isn't CAN-SPAM being enforced?" she said. "This individual has refused to stop his criminal conduct, notwithstanding two separate civil judgments and an injunction by a U.S. federal court judge. I suggest to you the only effective way to stop Soloway is a long prison sentence during which he'll be incapable of continuing this criminal activity." Soloway has previously lost cases brought against him by Microsoft and by an ISP in Oklahoma, yet continued to spam.

Pechman said it was difficult to come up with a sentence for Soloway because there have been so few other spam cases in the courts and because the legal system doesn't yet have appropriate sentencing guidelines. "This statute really needs a set of guidelines written and tailored to the CAN-SPAM act, tailored to the evolving computer science that allows people to engage in this activity," she said. "The current guidelines are not really very helpful," especially when CAN-SPAM violations are combined with other crimes, she said.

Soloway apologized to the judge and to his family, admitting that his actions were wrong. "There is no one else to blame but myself," he said, before the judge handed down her sentence.

Soloway has apologized for his activities before. After he was investigated in 1999 in California for spamming activities, he told detectives that he was sorry and learned a lot, Warma said. "He then moved on to another state and immediately engaged in the same behavior," she said.

It has been more typical for Soloway to boast about his techniques than to apologize for them. In online forums he would brag that he would never have to pay the millions of dollars the civil courts ordered him to pay.

He claims he lived in a modest household growing up but went to school with kids who were wealthier. He didn't have friends and always figured that if he earned a lot of money, people would like him, he said. "The only time people ever talked to me was when I made money or spent it," he said. "It was completely wrong. I'm very embarrassed and ashamed."

Microsoft attorney Aaron Kornblum attended the hearing and said he was pleased with the results. "Soloway repeatedly broke the law. He defied a federal judge and he made a lot of money. This sends a strong message."

Soloway was one of the first spammers Microsoft sued when, in 2003, the company decided it was time to try to put a stop to spam using legal means. At the time, Soloway was known as the third-most-prolific spammer in the world, Kornblum said.

In addition to the prison term, Soloway will serve three years of probation and must do 200 hours of community service.

The government has also asked for a separate restitution hearing.

For the reord i hated Soloway when he had money and still hate the bastard now. Seems a little unfair to blame the rich kids, he (or his parents) it appear have some deep psychological issues as most neurosies with children are associated with the parents.

in this the number of kings of spam is commented on. a common theme is this.

"I take full responsibility for everything I've done. I am sorry for all the people that got the e-mails," he [soloway] said.

“[soloway am very embarrassed and ashamed.”

Spamhaus.org's view.

Richard Cox, chief information officer of anti-spam group Spamhaus, told SCMagazineUS.com on Wendesday that he was a bit disappointed by the lighter-than-requested sentence imposed on Soloway. But Cox said he takes solace that a number of other high-profile spammers have been charged under federal laws.

"At least we are seeing consistency of these guys going down," he said.

Soloway replied: "I was used to living a certain lifestyle and I tried to maintain it. I tried to live beyond my means.

"It was a new law. I thought I would find a loophole."

Soloway's spam scam produced an income as high as $120,000 in 2005, he said. But it was not enough to keep up with his credit card debt, the newspaper reported.

When federal agents raided his upscale apartment in downtown Seattle, they found 24 pairs of sunglasses worth $3,724, and 27 pairs of shoes valued at $7,412.

"I built my entire lifestyle around a facade that was not really who I was," Soloway told Pechman. "I was so scared of losing it. I am very embarrassed and ashamed."

Soloway has been living in a halfway house since he posted bail. He'll stay there until he surrenders in two months.

He added, "I am happier than ever because people actually talk to me for who I am."

Redondo Beach attorney Tony Capozzola, who represents Soloway, said the prosecution was overzealous in asking that his client spend about nine years behind bars.

But Capozzola said the judge, in sentencing his client to 47 months in prison, rightly considered how new Soloway's crimes are and rejected the prosecution's estimates of how much monetary damage Soloway's activities caused.

He said Soloway will likely be released in about two years, and will serve the time at a prison "camp," which will allow him to work.

"I'm really happy with that," Capozzola said. "I think a fair sentence came about in this case."

He said he spoke with Soloway's family, which still lives in the South Bay, after the sentencing.

"They are relieved that the matter is over," Capozzola said. "They do understand that some punishment was required, and they don't have any argument with the court's findings."

Soloway pleaded guilty in March to one count each of e-mail fraud, mail fraud and tax evasion.

Because this area of law is so new, both sides agreed that there were some challenging issues.

Soloway broke the law two ways: He made fraudulent misrepresentations about his service to customers and personally engaged in spamming.

According to the charges, he sent tens of millions of e-mails to advertise his company, which mostly operated under the name Newport Internet Marketing, from November 2003 until his arrest.

He told potential customers that, for $495, they could have an advertisement sent to 20 million e-mails, or receive software that will allow them to send up to 80 million e-mails themselves.

He claimed that the "broadcast e-mails" were legal because they were to people who agreed to receive messages, and he promised a money-back guarantee and around-the-clock technical support.

Soloway was arrested as part of Operation Bot Roast. According to the Department of Justice, a botnet is a collection of comprised computers that fall under the remote command and control of a criminal "bot herder" or hacker.

Most victims don't know this has happened, but their computer - and their domain names and e-mail addresses - then become the conduit for identity theft and spam.

Assistant U.S. Attorney Kathryn Warma said in court filings that Soloway's crimes were "markedly malicious" and he made "brazen and even boastful claims that he is above the law."

His activities continued even after he was ordered to pay nearly $7.9million to Microsoft in May 2005 and an Oklahoma Internet service provider more than $10million in September 2005. He never paid.

Warma argued and presented evidence to show that Soloway's actions cost millions of dollars - and warranted the higher sentence.

Soloway's attorneys argued that the cost to spam victims who only had to hit the "delete key" is minimal.

"Someone who sends unsolicited spam should be punished, but when you compare this with the federal crimes of major distribution of narcotics and violence, and bank failures caused by greed, this crime certainly does not rise to a sentence of 10 years in prison," Capozzola said.

Soloway's attorneys also asked for leniency because he has Tourette's syndrome. He has two months to surrender so that he can work out his medication issues. 

Been a while since Tony Capozzola has been heard of. theolympian.com a Seattle newpaper notes

Soloway said he is deeply in debt and owes more than $17 million in civil judgments.  ... So, are they victims or perpetrators?" Pechman asked

There is a point when the judge misses the point - yes spam can be called marketing too, and when spam is sold as marketing does that make marketing as evil as spam ? - remember i just log the spams i got, i never bought the soloway lies.

Paul Shukovsky of seattlepi.com seems to have been in court

'Spam King' gets nearly 4 years in prison
Judge likens sending fraudulent e-mails to Internet pollution

By PAUL SHUKOVSKY
P-I REPORTER

U.S. District Judge Marsha Pechman ended the reign of the so-called Spam King, who earned his title by sending out millions of unwanted e-mails, by sentencing the Seattle man to nearly four years in prison Tuesday.

Robert Soloway is the second person in the country to be convicted under the Can-Spam Act for flooding the virtual world with fraudulent e-mail messages. His sentence of 47 months is less than half of what prosecutors wanted.

Soloway told Pechman that he did it for the money to pay for fine clothes and a luxury apartment. But Pechman likened him to a polluter who had fouled the Internet.

Investigators said Soloway used software called Dark Mailer to tap into a network of "botnets" -- zombie computers that he used to send bulk e-mails with anonymity. He also sent out advertisements for his commercial e-mail clients using the addresses of real people without their permission.

Assistant U.S. Attorney Kathryn Warma called spamming a serious problem and compared the Internet to "a free-ranging Wild West" that is a welcoming environment to such cybercriminals as Soloway.

The prosecution and the defense jousted Tuesday over aggravating factors that could persuade the judge to increase Soloway's time behind bars.

Although Soloway acknowledged that he sent out a huge number of illegal spam e-mails, defense attorney Robert Wayne said there was "not a shred of evidence" that he used zombie computers to do it.

Soloway violated the Can-Spam Act, in part, by falsifying the header information in his e-mail messages. The program he used automatically substituted the e-mail recipient's name for that of Soloway's, making it appear that the recipient had sent a message to himself or herself or used bogus addresses in the from field. The purpose of these digital gymnastics was to get around any spam filter on the recipient's computer.

The sentencing Tuesday followed guilty pleas from Soloway in March to single counts of e-mail fraud, mail fraud and tax evasion.

Reviled by anti-spam groups, Soloway sent more than 90 million e-mails in just three months through two servers, according to court records.

Warma and fellow Assistant U.S. Attorney Richard Cohen had asked Pechman to send Soloway away for nine years. Richard Troberman, another of Soloway's attorneys, wanted a sentence of two years at the federal prison camp in Sheridan, Ore., and a fine of less than $100,000.

Pechman first heard from Soloway, then chose a middle ground.

Soloway -- composed and smartly attired in a conservative suit and muted tie -- told Pechman: "I take full responsibility for everything I've done. I am sorry for all the people that got the e-mails."

Pechman asked Soloway why he continued with his spamming after another judge in a civil lawsuit enjoined him from continuing.

Soloway spoke frankly. "I was used to living a certain lifestyle, and I tried to maintain it. I tried to live beyond my means.

"It was a new law. I thought I would find a loophole."

Soloway's spam scam produced an income as high as $120,000 in 2005, he said. But it was not enough to keep up with his credit card debt.

When the feds raided his upscale apartment at the Harbor Steps in downtown Seattle, they found 24 pairs of sunglasses worth $3,724, and 27 pairs of shoes worth $7,412.

"I built my entire lifestyle around a facade that was not really who I was," Soloway told an attentive Pechman. "I was so scared of losing it. I am very embarrassed and ashamed."

Now living in a 400- square-foot apartment under the supervision of federal officers pending his imprisonment within 60 days, Soloway said, "I am happier then ever because people actually talk to me for who I am."

Prosecutors now want to seize nearly $705,000 in Soloway's property, including his computer. But he said he has little left to seize.

The federal prosecutors asked Pechman to send a message by imposing the maximum sentence of five years for e-mail fraud alone, the violation of the Can-Spam Act.

"The government believes that it is important uniquely in this unprecedented e-mail fraud case to recognize and pronounce publicly, and emphatically, that fraud in e-mail is a serious crime," Warma and Cohen said in a sentencing memo to the court. "The financial and societal costs of this crime are immense."

Soloway committed his crimes on the Internet "for the very reason that they would maximize his criminal reach to hundreds of millions of people worldwide, also have the concomitant potential to inflict corresponding damages of a heretofore unimaginable scope, to victims in numbers that were impossible and even incomprehensible with the use of 'traditional' tools."

Pechman did send a message. But it was neither as sharp as the prosecution wanted nor as lenient as the defense sought.

The judge likened spam to pollution because it is "spewed out ... has an impact on everybody who has a computer, and there are some people who are poisoned by it, and there are others who are merely annoyed."

Pechman called criminal spamming "new territory" in jurisprudence. "There is not much case law." And she noted it's close to impossible to accurately count the number of Soloway's victims and to quantify the damage done.

"We have an emerging social problem," said the judge. "The World Wide Web has given us a new criminal playground."

Many people -- some of them quite brilliant, some of them quite mad -- have found their way there, she said.

"Mr. Soloway went into his bedroom at age 11, turned on his computer and that froze him in time in terms of social development."

Pechman gave Soloway at least 60 days to report for imprisonment so that he can resolve problems with medication for Tourette's disorder, which is characterized by involuntary movements and verbal outbursts. 

not a good tiper either

TOMMYPRAXEDES at 7/22/08 5:03 p.m.

i have given this guy a cabride before,he was vry arrogant and stiff me on tips

In

In court on Tuesday, Pechman likened Soloway to an 11-year-old boy who sat down at a computer years ago and never grew up.

In kirotv has a longer interview 11 minutes.

Dont like the scumbag - oily I expect that he shall become a problem on his release.

21 July: Court to sit is comfirmed.

United States District Court Calendar
     Honorable Marsha J. Pechman
     Courtroom 14206
     Tuesday, July 22, 2008

     Eileen Scollard, Courtroom Deputy
9:00am      CR07-187MJP        U.S. VS ROBERT 
                                       ALAN SOLOWAY        
                               Kathryn Warma
                               Sentencing                             Richard Troberman ..

hours 3 1/2                            on bond
Court reporter: y/

17 July: Thank you for the viagra spams 74.55.158.66. Another priceless idiot.

a penny for your thoughts ? J D Falk Local news komo tv - gives us the picture while the Judge does her thinking on fraudster/idiot we all 'love and care' about so much - oh my that soap is slipperly.

A 'mr botnet' related item in this

From the stand on Monday, investigators revealed some of the techniques that Soloway allegedly used to send out massive amounts of e-mail. After the government seized Soloway's servers from GoDaddy, a hosting company, investigators found files with as many as 10 million e-mail addresses on each server

.. also found Dark Mailer software on each server. Dark Mailer is a program that users can set up to automatically send out mass e-mails, drawing from databases to fill in the to, from, subject and body fields of the e-mail message. It also can spoof the header information, making it difficult to trace where the mail came from.

Selling the tools used by spammers is easy money, at least until you get caught. Just ask Adam Sweaney, a man charged with computer fraud who took the stand at the sentencing hearing in Seattle for Robert Soloway, the so-called spam king.

Sweaney said he earned about US$2,500 a month for a couple of years selling botnets that could be used for a variety of activities including sending spam e-mails. He didn't even write them himself, but he traded or bought them in online forums, he said.

Sweaney didn't sell a massive volume to a wide variety of people -- a typical week might involve selling three or four botnets to any of his six regular customers, he said. He also sold millions of e-mail addresses to spammers, including one who, unfortunately for Sweaney, was an undercover U.S. Federal Bureau of Investigation agent. 

One such victim was Thomas Miller, who runs a nonprofit, nondenominational religious organization that counsels death row inmates and helps jobless and hungry people in Ohio. Newport Internet Marketing offered to run a free e-mail campaign for Miller, who was looking to raise money for his organization. Instead, Miller's Web site was ultimately shut down by his hosting company after the company found that large amounts of spam e-mail were being sent from his account, purportedly by Soloway.

Miller estimates he lost $12,000 to $24,000 throughout the debacle while he scrambled to get a new site up and lost potential donations because he was without the site. He said he testified at the hearings because it was the right thing to do, but he doesn't have high expectations. "I don't believe I'll ever get anything," he said. 

13 July: We have sentencing recommendations and they are in the court page. Reading the Govt's evidence file (175 pages) 'OttO' at the Better Busines Bureau of OR,western WA and Alaska comes across as a bit useless retard - if i where them i would get rid of Otto for being useless.

Being 'foriegn' my knowledge of us case law isnt a strong point which is what the Troberman brief is mostly on tryng to reduce the sentence.

However with court doc's/enraged clients/statements from Robert himself about not cooperating and the like and a total disregard for the law as evidence I am not quite sure how thats going to 'wash' after all Robert might as well declare that the law should not apply to him. It's not just one rogue parking ticket.

In Robert is on the TV news America only it appears - i cannot view this.

In page 12 paragraph 43 (page 18 of the Troberman sentence pdf) It seems we make an entry.

[..] was involved in hacking and posted vile, vulgar, and twisted messages
 
According to Troberman we also hacked into the Swedish Woman's Educational Association (SWEA) website.

vile ? - hacking - you'd be amazed what a bit googling here and there turns up with. Many hackers would be upset if they knew that using google (or any other search engine) made them into 'hackers'.

Remember citizens next time you click on a url that's 'hacking' according to Mr Troberman. Lol.

Troberman and Soloway should both remember that if he had not spammed me to start with, or stopped continuing to spam me then this site and my 'interest' in it would have not existed.

12 July: Comrade Ed sends this picture of the spammer Robert Soloway. This is a first since it is the first official picture of him. We have the the unattributed and now defunct myspace picture (looks the same guy with a bit of extra fat). All pictures/videos welcome. IP geoloation witll probably prevent me getting this direct.

Theres a lot of stuff i need to review before i put it here so expect some daily updates.

Comrade Buss_Error in NANAE (thats nntp) hilights a few of the sticky wicket (the game of cricket) that Mr Troberman invokes on the mental state of Robert.

In the interest of full disclosure, here's the quote:

"In a letter to the court, David Comings, a leading world expert on
Tourette's Syndrome who first diagnosed Soloway's condition in 1988,
said Soloway's "genetic impulse disorders, Tourette's Syndrome and
attention-deficit hyperactivity disorder have contributed to his
(uninhibited) behavior and affected his judgment."

There is no page titled "David Comings" on wikipedia.
Searching Google: 

http://tourettenowwhat.tripod.com/GeneBomb.html

Hmmm. "controversial work". With this bit:
"In a remarkable series of papers by Comings and Comings in the
Journal, a number of claims are made that have profound implications
for future research on Gilles de la Tourette syndrome (TS).  Their
assertions fall outside of the mainstream of the very extensive TS
literature that has developed over the past 2 decades. The novelty of
the conclusions and the visibility of their presentation require that
the papers receive thorough discussion."

I'd hesitate to say "Quack for hire", but being "controversial" is
often a hallmark of such.

Tourette's Syndrome:
http://en.wikipedia.org/wiki/Tourette%27s_Syndrome

no cite for genetic impulse disorders. Perhaps this?
http://en.wikipedia.org/wiki/Impulse_control_disorder

or this?

http://en.wikipedia.org/wiki/Obsessive-compulsive_disorder

and for attention-deficit hyperactivity disorder

http://en.wikipedia.org/wiki/Attention-deficit_hyperactivity_disorder

Hmmm. OK, he can't control what drops out of his mouth (Tourettes).
Relation to spamming - NONE

Hmmm, Impulse control? Possible connection to spamming. More as one
GETTING the spam than SENDING it.

ADHD? Connection to spamming - NONE. In fact...

That deals with that problem. If your USA state based attorney general like Andrew Cuomo of NY isnt bannng all usenet then the discusion is worth a peek.

Being foriegn to most of the American judicial process i am pleased to report that the guilty plea by bob means no appeal.

I wonder if Jesus will turn up on monday and claim Soloway was on a 'mission from god' ?

11 July:In http://seattlepi.nwsource.com/local/370341_spamking11.html It is expected that events are to have be concluded on the 14 July (monday)

'Spam King' to be sentenced
Two-day hearing starts Friday for man who sent 90 million e-mails

By MIKE BARBER
P-I REPORTER

The lineup of people to testify in the sentencing of the 28-year-old so-called King of Spam is so long that it will require an unusual two-day hearing beginning Friday in federal court.

Robert Alan Soloway, only the second person to be convicted of criminal spamming under the 2004 "Can-Spam" law, pleaded guilty in March to single counts of mail and e-mail fraud, and to tax evasion.

The plea was entered 10 days before his trial was to begin on 37 more counts, including multiple counts of those crimes as well as wire fraud, money laundering and aggravated identity theft.

In the government's sentencing memorandum filed Monday, Soloway is said to stand out "worldwide for the volume and markedly malicious nature of his criminal spamming activity; the fraudulent 'spam promotion' sales scheme associated with it; and for brazen and even boastful claims that he is above the law and anyone -- even federal judges -- who would dare attempt to seek his compliance with it."

U.S. District Judge Marsha Pechman is expected to sentence Soloway following the conclusion of testimony slated for Monday.

The charges carry a maximum sentence of 20 years in prison and more than $500,000 in fines.

Prosecutors Kathryn Warma and Richard Cohen, both assistant U.S. attorneys for Western Washington, have asked for nine years in prison and a stiff fine in the $400,000 to $1 million range.

Soloway's attorney, Seattle lawyer Richard Troberman, responded with a recommendation of two years in prison at the Federal Prison Camp in Sheridan, Ore., and a less severe fine under $100,000.

Troberman argues that the government's recommendation is disproportionate to the crime and wants Pechman to consider that his client suffers from behavior-altering conditions -- Tourette's syndrome, attention-deficit disorder and "oppositional defiant disorder" -- for which he takes medication.

Federal prosecutors sought the two-day hearing to provide experts, witnesses and victims from around the nation and overseas to explain the technologies and evidence schemes in light of the 2004 law, and demonstrate how victims were affected between 2003 and 2007.

Victims, who include a businessman from England, are expected to testify first. Others include an Oklahoma man who never saw a penny of a $10 million judgment he won against Soloway in 2005; FBI and private computer analysts and security experts; and Adam Sweaney, who is himself awaiting sentencing on federal criminal spamming charges.

Sweaney, court papers say, will testify that Soloway rented a network of hacked computers, also known as a "bot net," to expedite bulk e-mail, or spam.

Soloway ran afoul of the Can-Spam Act by falsifying the header information in his e-mail messages to get around spam filters, investigators have said. That was done by using a program that automatically substituted the e-mail recipient's name for Soloway's, causing messages to appear as though recipients had sent them to themselves.

Investigators earlier this year said Soloway used software called Dark Mailer, which allows users to tap into a network of proxy computers to send spam anonymously.

Soloway, who is internationally reviled by anti-spam groups, sent more than 90 million e-mails in three months through just two of the servers he used, investigators said.

In his written response to the government's recommendation, however, Troberman argues that the federal case, as well as some victims' claims, are overblown.

"Without question Mr. Soloway has been a nuisance to Internet users, but the court should keep his offense in perspective," Troberman wrote. "What he did was send huge amounts of e-mail over the Internet advertising his product and service, often using forged headers to people who did not want to receive it."

Troberman said Soloway never sent worms or viruses to damage computers, for which others have received less severe sentences.

Essentially, Troberman argues, Soloway has never faced charges in the criminal justice system and has learned his lesson. "His likelihood of recidivism is low," he wrote, saying Soloway "will remain law-abiding."

Before criminal charges were brought against him by the Justice Department in May 2007, Soloway had been found guilty in several civil spam cases, including a judgment Microsoft won against him in 2005 worth more than $7 million. An Internet service provider in Oklahoma was awarded a $10 million judgment that same year.

The federal judge in that case enjoined Soloway from initiating across state lines commercial e-mail messages that contained false or misleading information.

But Soloway disregarded that order, prosecutors say.

"Remarkably, Soloway brazenly defied Judge Thompson's permanent injunction every day thereafter, until the day of his arrest some 15 months later," the prosecution's sentencing memorandum says.

Further, prosecutors say, Soloway evaded collection efforts and publicly boasted about it on an Internet chat room, writing:

"I always win ... regardless of the judgment amount ... losing is not an option, and I never ever, ever have to pay a single cent to anyone."

According to court documents, Soloway began his "broadcast e-mail" business in California when he started up Newport Internet Marketing in 1997. After California passed one of the country's first criminal spam laws in 1999, several police agencies there began investigating Soloway in connection with an array of spamming complaints, including one from the Japanese government. While charges were never filed, police noted that Soloway had "apologized for his e-mail practices" and said "he has learned a lot."

Soloway then moved to Oregon, sending spam from several locations but also, his defense lawyer notes, in 2003 helping form a group for people with mood disorders called Moody Blues Stress Workshop.

In a letter to the court, David Comings, a leading world expert on Tourette's Syndrome who first diagnosed Soloway's condition in 1988, said Soloway's "genetic impulse disorders, Tourette's Syndrome and attention-deficit hyperactivity disorder have contributed to his (uninhibited) behavior and affected his judgment."

What is interesting about this is that the 'charity help' seems to be one that nobodies has every heard of or even Robert failed to boast of and they be "Moody Blues Stress Workshop." which i cannot find any reference to via a few quick and dirty google searches. Another lie that his Lawyer is 'broadcasting' for Soloway ?

That's normal Soloway tactics though. Very under the radar. Pictures and court observations needed, can you help ?

6 July: OK the start, the second and yet another You may begin to understand why i (and others) dont like spammers. The pages are rather old but from this Robert Soloway is clearly big in spam, his legacy is there for all to see whatever happens on Friday.

In this the second is a class example from 2005. Remember that wave ? on new years day. This was Spam 26. Enjoy

Subject: *SPAM?* Re: your web site might benefit from this...
From: Aida Goss richardg@centralpets.com
Date: Thu, 13 Jan 2005 18:41:59 +0100
To: yes @btconnect.com
Return-Path: no1@cashette.com
Delivery-Date: Thu, 13 Jan 2005 17:47:06 +0000
Received: from c2bthimr06.btconnect.com (actually host 206.73.73.194.in-addr.arpa) by dswu27.btconnect.com with SMTP-IBMR (XT-PP) with ESMTP; Thu, 13 Jan 2005 17:47:05 +0000
Received: from 200-171-244-37.customer.telesp.net.br (200-171-244-37.customer.telesp.net.br [200.171.244.37]) by c2bthimr06.btconnect.com (MOS 3.5.4-GR) with SMTP id BOR35968; Thu, 13 Jan 2005 17:17:11 GMT
X-Message-Info: FXfahIJY79zeZ6IMWxcnTCX190SROtflSK5X51F1c3IU
Received: (from j9sedge@localhost) by vzi2-bulrush8.x1rtf.bluebottle.com (7.28.61/3.61.16) id kw146TBW96lgf694; Thu, 13 Jan 2005 12:47:59 -0500 GMT
X-Authentication-Warning: wyh87-madeira01.juv341mr.bolt.com: u65dispensable set sender to jimmack@marchmail.com using -t
MIME-Version: 1.0
X-Old-Subject: Re: your web site might benefit from this...

Click to Email Your Web Site
to 28 MILLION PEOPLE

=> F-R-E-E Today Only <=

If You Are a Non-Profit Organization That Aids the Tsunami Victims. Visit Our Web Site for Details on Our Offerings.
If You Fit the Criteria Above and Are Interested, Mail Us At: Tsunami Relief Non-Profit Offer, Box 1259, Seattle, WA 98111.
Every So Often We Will Email You A New Non-Commercial Special for Specific Non-Profit Causes.

    Unsubscribe From Our Non-Commercial/Non-Profit Email List
    (Please Note That The Primary Purpose of this Email is Non-Profit in Nature & is Exempt From S.877 Email Guidelines Because of! This)

The 'Tsunami Relief Non-Profit Offer' hmmm thats something to with Viagra right ?. Beware there's more to this story than meets the eye.

There's probably computer crime,theft (Brazil),use of a bot net, fraud, etc here. Please look beyond the sheep and see the wolf in lambswool jumper. Ask yourself - how does spamming via a computer in Brazil help an American citizen who is nowhere near the disaster zone ? The answer is it does not.

No charity has ever comfirmed any donation either publically. So I assume that no donations where made.

4 July: From http://www.wawd.uscourts.gov/calendars/JudgeMarshaP.PechmanCalendar.htm content changes every week so here is a pdf.


US Court
Sentencing schedule

U.S. Federal Courthouse | District Court | Calendar | Print
                         Page 1 of 1


 United States District Court Calendar
           Honorable Marsha J. Pechman
           Courtroom 14206
           Friday, July 11, 2008
           Eileen Scollard, Courtroom Deputy


 9:00am   CR07-187MJP     U.S. VS ROBERT ALAN SOLOWAY         
                Kathryn Warma           

Sentencing                        Richard Troberman          					  Richard Cowan
                                  on bond
   All day                            Court Reporter: y

OK see you all soon.

27 June: Its been seven days since a sentence was due to be passed/considered in Seattle, i seem to be drawing blanks on the progress of this case (timezone 12:00 gmt). If you know whats going on please drop us a note.

20 March: Thanks to John Levine at http://www.circleid.com/posts/83207_more_the_soloway_spam_case/ we have a copy of the plea. - A copy of the pdf document is here.

As mentioned on Opsan: no Tony Capozzola 'hotshot' lawyer link (where he go ? pasta problems* ? '*Italian lawyer'). Troberman the first lawyer seems to be back in control. It implies that assets are still hidden and that Soloway and family have withheld information.

It is worth a read http://thisfool.com/soloway-73.pdf.

15 March:Newsflash: GUILTY PLEA !!!!!

FOR IMMEDIATE RELEASE March 14, 2008 SEATTLE SPAMMER PLEADS GUILTY TO MAIL FRAUD, SPAM AND TAX CHARGES Man Sold Spamming Software and Spamming Services Impacting Millions of Computers ROBERT ALAN SOLOWAY, 28, the owner of NEWPORT INTERNET MARKETING CORPORATION of Seattle, Washington, pleaded guilty today in U.S. District Court in Seattle to Mail Fraud, Fraud in Connection with Electronic Mail, and Willful Failure to File a Tax Return. SOLOWAY was indicted in May 2007. SOLOWAY, dubbed the “Spam King” by investigators will be sentenced by U.S. District Judge Marsha J. Pechman on June 20, 2008. According to records filed in the case, between November 2003, and May 2007, SOLOWAY operated NEWPORT INTERNET MARKETING CORPORATION (NIM) which offered a “broadcast email” software product and “broadcast email” services. These products and services constituted “spam” i.e. bulk high volume commercial email messages that contained false and forged headers and that were relayed using networks of proxy computers (including “botnets”). SOLOWAY and NIM made a number of false and fraudulent claims about the products and services on their website. Among them was a claim that the e-mail addresses used for the product and services were “opt-in” email addresses. The website promised a satisfaction guarantee with a full refund to customers who purchased the broadcast email product. However, customers who later complained about the goods and services they had purchased, or who asked for refunds, were threatened with additional financial charges and referral to a collection agency. SOLOWAY spammed tens of millions of email messages to advertise the NIM websites from which he sold his product and services. Soloway constantly “moved” this website, which was hosted on at least 50 different domains. In the plea agreement, SOLOWAY further admits that in tax year 2005 he earned $309,725 in gross revenue, but failed to file an income tax return. Mail Fraud is punishable by up to twenty years in prison and a $250,000 fine. Fraud in Connection with Electronic Mail is punishable by up to five years in prison and a $250,000 fine. Willful Failure to File Tax Returns in punishable by up to a year in prison and a $25,000 fine. At the time of sentencing Judge Pechman will determine the loss amount and the amount of restitution, and the items to be forfeited to the government as proceeds of crime. SOLOWAY agrees in his plea agreement to submit to a polygraph examination regarding his assets. The case was investigated by the FBI, US Postal Inspection Service and Internal Revenue Service Criminal Investigations (IRS-CI) in conjunction with the Computer Hacking and Intellectual Property (CHIP) Task Force. The case is being prosecuted by Assistant United States Attorney Kathryn Warma.

Roll on June, It is my intention to continue to watch Robert Soloway as a fraudster and as a menance to anybody with an email address it needs to be done.

The evidence in this file of his activites will also remain. It has taken a year and twenty days from May last year to the judgement at this point.

A message for Judge Pechman

Robert Soloway has caused damage and fraud worldwide as an observer of the person you will have in your court may i please point out that he is not just a 'menance' to americans but to anyone with an internet connection which means that europe,india,south america and many other places have had to deal with and clean up his mess in some form. I hope that you will see fit to use the upper limits of the sentencing guidelines. Bananas in the Falklands

with 3/40 (other 37 charges dropped as part of the deal). Robert has the self admitted title of fraudster. - Its been a good day. I wonder how Tony Capozzola is going to explain this one ?

4 March: Related news that Jeremy Jaynes (a spammer) tried to use the 'free speech' arguement and lost in court, I wonder if Robert's motley legal team will use this ?

People seem to forget that freedom of speech means just that nothing more. Now with computer crimes commited worldwide by Robert, and that Robert had to rely on Chinese isps, not forgetting the theft charges. Means that nobodies rights have been abused.

Freedom of speech should be cherished, and if the 'advertising industry/pracitioners' ever needs this protection you know theres a problem.

21 January:Reading an interesting book about our friends the chinese which may explain why spammers in China switch from China telecom to netcom and China Mobile (things that Robert certainly did)

In Will Hutton's book the writing on the wall - china in the 21st century isbn: 9780316730181 on page 150 (Chapter six) quotes an economist article of 2005.

The soe* supervisory boards do not make this decisions. In the recent past the ceos of China Telecom,Netcom, Mobile and Unicom were arbitrarily swapped arround because the party was concerned that the companies were becoming too competitive and wanted to to encourage a more collaborative culture

*soe means critical chinese industry to the communist party ** party here means little red books, not dancing and drinking.

Its an interesting read.

11 January: Paul Shukovsky at the Seattle PI writes that the charges against Robert Soloway now number 40, and the event in March shall have a little of an 'international flavour' missing until now from us trial. In http://seattlepi.nwsource.com/local/346878_spamking11.html We have a non american victim (no not i)

Paul also writes that Robert is apparently 'reviled' by many - hmmm i wonder why. Perhaps somebody might explain this to me (humour btw).

A number of spammers try to defend Soloway here in the sound off section.

8 January: Our Kung Foo friend in opsan (Sensei) informs us that things have been set back further

Fraud and Related Activity in Connection with Electronic Mail 1 charge Pending Mail Fraud - Frauds and swindles 10 charges Pending Fraud by wire, radio, or television 5 charges Pending Laundering monetary instruments to promote specified unlawful activity 13 charges Pending Aggravated identity theft 6 charges Pending Falsifies header information in multiple commercial electronic mail messages 1 charge Pending Internal Case Number: 2006R01674 Court Docket Number: CR07-0187 A trial is scheduled before Judge MARSHA J. PECHMAN on March 24, 2008, 09:00 AM at United States District Courthouse, 700 Stewart Street, Seattle, WA 98101 in the case which involves ROBERT SOLOWAY.

In doc 295 The swedish connection becomes clear

Mr. Soloway has dual United States/Swedish citizenship by virtue of birth, pursuant to Swedish law (a child born to a Swedish mother is automatically a Swedish citizen) that went into effect nine days before his birth. Robert's mother obtained Robert's first Swedish passport in 1991 (at age 11) based on advice she received from a U.S. Customs -6- official. See declaration of Rachelle Soloway, attached hereto as Exhibit B. To avoid losing his Swedish citizenship, it was necessary for Robert to make application to the Swedish government for permanent citizenship before age 22. Accordingly, Robert submitted an application in 2001, just prior to his 22nd birthday. The application was approved on July 10, 2001.... As set forth in his Motion for Review, Robert's connections to Sweden are quite tenuous. His only "close" relative in Sweden is his eighty-five year old grandmother, who he has seen only once in the last twenty years (on a trip with his mother to celebrate his grandmother's eightieth birthday). Robert does not speak Swedish, and his grandmother does not speak English.

Sounds like the money/tax connection is under control by the Swedish and US tax authorites.

We all (from Opsan) get a healthy credit in the court document care of Mr Troberman - my comment about his possible 'retarded' cd-r skills gets a mention.

Countdown timer reset again - Robert still has time to leave and flee, so place your bets now! I'd like to say hello to Tony Capozzola who if our geolocation service is correct means he is visiting us - hi Tony, I assume to that the other one is listenting in.

Opsan - Should we move to use email ?

6 January: One day to Court (will he or wont he turn up and be called a loon?) But the 35 charges have become 37 (+2 from the irs)

At this week's arraignment he will face additional counts of wire fraud and aggravated identity theft, as well as two misdemeanor charges stemming from his failure to file income-tax returns. The IRS says Soloway had a gross income of $309,725 in 2005 and $294,334 in 2006, yet failed to file returns.

Source Seattle times (link opens in new window). They also confirm the Tourette's syndrome claim.

3 January: A happy new year. Being an idiot i fixed the countdown script thing (january is 0, not 1) The fun and games in court begin on Monday.

I hope to see you all soon.

12 December: Being that Christmas came early (June) this year for a lot of us. I was inspired to pen this based upon the carol.

On the first day of Christmas,
Robert Soloway did send to me
28 million email addresses for free.


On the second day of Christmas,
Robert Soloway did send to me
two Country music bands a spamming
and 28 million email addresses for free.

On the third day of Christmas,
Robert Soloway did send to me
Three logo designers designing logos for free
two Country music bands a spamming
and 28 million email addresses for free

On the forth day of Christmas,
Robert Soloway did send to me
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the fith day of Christmas,
Robert Soloway did send to me
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the six day of Christmas,
Robert Soloway did send to me
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the seventh day of Christmas,
Robert Soloway did send to me
Seven Africians a 419-ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the eight day of Christmas,
Robert Soloway did send to me
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the ninth day of Christmas,
Robert Soloway did send to me
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the tenth day of Christmas,
Robert Soloway did send to me
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the eleveth day of Christmas,
Robert Soloway did send to me
Eleven pipers seo-ing,
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the twelfth day of Christmas,
Robert Soloway did send to me
Twelve drummers a diet pilling,
Eleven pipers seo-ing,
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419-ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

Rergardless of what do please, enjoy the new year and please come back in January when Robert faces trial in federal court.

5 December: In Danny Westneat of the Seattle Times takes up a media 'whats been happening since May 31 with Robert' in a roundabout oped peice.

While its nice to know that Bob is out of the picture lest we forget the other spammers out there.

Robert was plebeian than king.

Perhaps one king of many ?, a note as to why Robert got let out of pre trial detention reported was

A judge let Soloway out of detention because he has Tourette's syndrome. Without his meds, he was racked with "uncontrollable tics" and went days without sleep. He became suicidal.

Well i think we can add deranged loonatic to the what makes Robert Soloway 'tics' list dont you. Nice to see Trobermann and Capozzola are consistenty playing the 'my clients a mentally challenged moron' defence. Anyhow Mondays for us have not been the same since Soloway had his assets frozen in June - they got better.

How 'really insane' Robert is remains a point of discussion. I note that a recent search for him (4/dec/2007)seems to put him in the care of his parents in Califonia. We all know the address.

Anyhow stay tuned later on this month for a specially adapted Robert Soloway carol 'the twelve days of christmas' which should lighten the mood here.

Anyhow that's enough insults for one day dont you think ?. we have January to wait for when the real fun starts.

16 November: Plans and promises.

Announcing as promised court.html (new window open) and a new front page (new window open) have been released. Comments welcome on both. I am 'working' on them still but they seem good enough to start using despite spelling issues.

The aim of the front page is a speedier loading file, and something that gently introduces Robert to people who may wish to find out more in January without looking at dig reports and going '?'.

The court file should also be a lot faster to load. Rather than sticking new stuff in the broadcastspam.html file which is becoming rather a monster to load.

This file (broadcastspam.html) will be updated in 2008 after the trial. Its only fair that somebody keeps an ear to the ground.

Comments/thoughts welcome. Theres a month and bit for you to collect them.

12 November: Bot Herder news from Slashdot John Schiefer, 26 an it security consultant (*nudge nudge wink wink) working for 3G Communications, from Los Angeles has been convicted of making trojan computers. A better link is this.

8 November: A hunt last week seems to indicate that the Court has 'sealed' Robert Soloways proceedings. In plain english that appears to mean no more news from them until the trial.

Future plans: Thisfool.com will be getting a short executive summary front page soon (this page will remain as broadcastspam.html) and a court procedings page for the 2008 trial will be created which should be a more pleasant experience to load up compared to this monster.

Anyhow its been much better with Soloway in Prison and whatever he is up to now lets hope I dont need to advise you all of Bobs doings. However if have news sightings/photos/stories and would love them to be aired, or shared only by the trusted soloway watchers drop me line, or contact us all via Opsan.

Remember the comedy starts in Janaury 2008.

15 October: Robert Soloway has left his 'known' myspace.com account

Ongeldige vriend-ID. Deze gebruiker heeft zijn/haar lidmaatschap opgezegd, of zijn account is verwijderd.

Translation: Invalid friend-ID. This user has canceled its/her membership, or its account has been removed. Im sure hes on myspace again somewhere.

Will he skip bail - if only I was a betting monkey.

14 October: Hello again - In a stealth move by the Judge who it seems has decided Robert is not a flight list despite being dual nationality whatever he was released on the 20 September prision reigister Lets hope if he does skip bail the Russian mafia have a go at finding him.

1. ROBERT ALAN SOLOWAY 37427-086 28 White M 09-20-2007 RELEASED

That's 112 days behind bars, so if you see an increase spam, im blaming Bob (russian mafia take note please). Coverage in nanea. So lets all hope Bob turns up for his trial in January for the Judges sake.

Theres more going on here.

06 August: Missing it ? http://web.archive.org/web/*/http://emailbroadcastingcompany.com. An extra Youtube Soloway News Medely.

I like the later reporter who did a free peoplefinder search and made it sound 'so' authoritive even though thats about all he appeared to do (or got an intern to do it). Go Wayne who also discovered botnet's just three weeks ago!

Bananas in the Falklands thanks Wayne Havrelly for also discovering botnets for us all.

1 August: In seattle times newspaper we have a Robert Soloway Go Daddy server (Bob Parsons) link up.

The pile of potential evidence in Soloway's case grew in late June, when the government seized six hard drives from server computers maintained by GoDaddy.com, an Internet hosting provider. According to a search-warrant affidavit filed by the FBI on June 21, Soloway leased the six hard drives from March 30 until his arrest May 30. It is not known what the government found on the servers. According to the affidavit, Ben Butler, network-abuse administrator for GoDaddy.com, confirmed to the FBI a few days after Soloway's arrest that Soloway had leased the six servers, and that the "Dark Mailer" software program had been installed on each of them.

Nothing to with this kill ? change of ownership ?

whois -hwhois.register.com nim-company.com 
[Querying whois.register.com]
[whois.register.com]

The data in Register.com's WHOIS database is provided to you by Register.com 

   Registrant: 
      Registercom
      Domain Registrar
      575 8th Avenue 
      New York, NY 10018
      US
      Email: domainregistrar@register.com

   Registrar Name....: REGISTER.COM, INC.
   Registrar Whois...: whois.register.com
   Registrar Homepage: www.register.com 

   Domain Name: nim-company.com

      Created on..............: Wed, Jul 26, 2006
      Expires on..............: Thu, Jul 26, 2007
      Record last updated on..: Sat, Jul 28, 2007

   Administrative,Technical Contact:
      Registercom
      Domain Registrar
      575 8th Avenue 
      New York, NY 10018
      US
      Phone: +1.9027492701
      Email: domainregistrar@register.com

   DNS Servers:

   ns2.expireddomains.register.com
   ns1.expireddomains.register.com

Make up your own minds - the link is spamsuite.com/node/218 PDF document. Address used: Robert Solowa, with an address of 1200 Western Avenue, Seattle, WA

12. During the week of June 4, 2007, I spoke by telephone with Ben Butler, Network Abuse Administrator for GoDaddy.com. He advised me that Robert Soloway had rented a total of six dedicated servers from GoDaddy. Mr. Butler indicated that GoDaddy was interested in determining whether the servers that had been rented by Soloway had been used to transmit or distribute spam. Mr. Butler indicated further that if GoDaddy determined that the servers that had been rented by Soloway had been used in spamming activity, GoDaddy would turn those servers over to the FBI.

Appears boxes just had ip address allocations, no nameservering. Anybody confirm ?

Mr Parsons (godaddy founder) im surprised*. Not being privy to Soloways billing and bank records its interesting to see the hint of an back office address collection operation, but on godaddy.com who sell domains that's 'cocky'

Admin wise Some links clean up on this page. * i don't partically like Mr Parsons views (winge's really) on domain names (generic terms in europe etc) or trade with his operation in any capacity now, or in the past. Whether you can believe that 'anti spam bull' that godaddy.com state remains to be seen. Robert Soloway is (and was) a Rokso class spammer who it appears used his own address and name on the godaddy billing system.

23 July: Robert Soloway decided to spend some more time in Federal prison after waiving pdf 7/20/2007 - WAIVER of Speedy Trial which was agreed by all concerned pdf STIPULATION Continuing Motions, Filing Deadline, and Trial Date (The 20th July [Friday] was the last date to submit Filings in the Case if it was to have started on the 6 August).

So the first document listed seems to have been signed by Robert, Discovery to finished by 3rd December and the Trial date seems to be moved to the 7 January (some time up to 31 January 2008 in original request)

OK what is Tony Capozzola doing - I note much from troberman but nothing from the 'Italian' side.

Admin note: Countdown to Federal Trial and contact forms on this page have been added A big thank you to Andy for the 'proper' forms. - Change from 6 August to 7 January 2008 made to the countdown timer.

12 July: An aquaintance of Robert confirms the myspace site is Robert Soloway.

Everybody please meet somebody new called Kelly Horton who (and being a civilian in anti-spamming circles) does something in Oregon called tothepointtv.org: (link to source in new window requires flash). Who has a noteable view on Mr Soloway

Rachelle Soloway (his mother) it appears has a link with the http://www.swea.org/ Swedish Womens educational association based in: 5928 Balfour Court, Suite B - Carlsbad, California 92008 - USA - E-post: office@swea.org

Being that's in Swedish which im not familair with except for the swedish chef in the Muppets - The Wayback machine assists and says

... Swedish Women's Educational Association International, Inc. is a world-wide non-profit organization for Swedish and Swedish-speaking women (living abroad) with the purpose to promote Swedish culture and traditions, and encourage friendship and personal growth among its members.

Rachelle Soloway - rsoloway1@verizon.net gets a mention see swea.org - pdf file needs translating into English - note a variant of rsoloway'xx' at verizon was used in a usenet posting by Robert telling Microsoft and Mr Braver in a 'im not paying your court awarded fines' message. Seems fair game here.

update: Henrik (with the honourable title of 'Super Fan') does a quick and dirty translation and says the text has no value. Anyhow a 'big thank you' to Henrik is in order.

Perhaps most revealing is when searching for Robert the use of some software on the windows platform called 'proxychain' which it appears is traceable to Robert and 'fits in' with his known activities.

An interesting swedish website that (a summary will do) and that pdf document needs translating (if valid) so if anybody can help out - it would be much appreciated.

6 July: Robert
Soloways
Myspace page ?

A chance discovery by moi in wikipedia, but Henrik in opsan picks up the batton and swims in the myspace design sewage.

open dump file in new window

Robbie is a friends with: www.myspace.com/ryancurran (Robbie appears under friends and have also made comments) male. another guy: www.myspace.com/sillyrabbit73 (Appears under friends and have also made comments) (this time a woman): www.myspace.com/mazcooper plus more men: www.myspace.com/tinaloulou, www.myspace.com/jaredplus www.myspace.cn/seattlepartyboi (Robbie describe himself as Adonis = god known for it's beauty... hehehe they like pretty boys in prison Robbie !!!) www.myspace.com/24229317 www.myspace.com/alexgarcia Notice something special about some of those myspace profiles ?

If any of the links don't work, take a look at an Internet archive like google cache, or wayback machine.

Then take a look at this blog from one of them:

blog.myspace.com/index.cfm?fuseaction=blog.ListAll&friendID=24229317&MyToken=71b0b005-7e70-46f7-b3b4-12682c2cb7a8ML. Notice the line "Robbie Rob-Such elegance and class at the same time. Yet I still havent found you that big cock you wanted."

I think you can make up your own minds. Anyhow want some more ? I found

on sillyrabbit73 is 'illuminating' Robert wrote "i had a dream with you in it. does that excite you or what?" seatlepartyboi tells much in comments where Robert wrote: "i'll be gay for you anytime chris..don't feel alone.. i'm always thinking about myself.. i know how it feels.. i always think about me at 2am too.. i even miss myself when i go to sleep.. it's tough being an adonis"

Want more ? you know the urls and the people. Please remember that being 'friends' with Robert does not indicate a business relationship. Its nice to get a name to a face, and a sort out of genders being Roberts been both male and female in domain registrations.

5 July: I hope you all enjoyed independence day (regardless of where) with Robert behind bars so let's go take a trip down memory lane. Also lets make Tony continue to provide us with some entertainment. After all why not.

According to the comrades at dailybreeze.com Roberts High School is (pvhigh.com Palos Verdes High School address: 600 Cloyden Road Palos Verdes Estates, CA 90274-1869

The Palos Verdes Peninsula Unified School District serves the communities of Palos Verdes Estates, Rancho Palos Verdes, Palos College Verdes Peninsula, Rolling Hills and Rolling Hills Estates. The Attendance Rates area is 21 miles southwest of metropolitan Los Angeles and draws predominantly middle to high-income business and professional residents. The school district’s reputation for having superior educational system

This amuses us from the aricle

He wasn't involved in student government or athletics. Oddly, considering where life took him, the 1997 graduate wasn't even a member of the computer club.

Oddly not too much new here but its rather humourous to get Tony Capozzola's take on the case. I don't see the relationship between the fbi and microsoft in this case. So (thinking aloud) where would be a safe place 'free of microsoft's sphere ?' - that i think would make the moon or another planet the place to hold the trial. This entertaining was provided by Tony Capozzola.

I would like to say that en.wikipedia.org Palos_Verdes_High_School seems is in a need of an update.

27 June: News from comrade Ed that the spammer persons named.

Federal jury convicted James R. Schaffer, of Paradise Valley, Arizona, and Jeffrey A. Kilbride, of Venice, California, on multiple charges including conspiracy, money laundering, fraud and transportation of obscene materials."

More details Sound familiar ? to our federal prisioner id 37427-086 ?

Perhaps of more interest is this 21 June missive which many of us missed is that China might start to be worrying about its rather widespread spam problem that it either promotes (bullet proof) or thus deems that one yahoo email to be a 'national security' problem. It might be pure 101% chinese bollocks (face saving) and nothing will be done but in the meantime I can recommend cn.countries.nerd.dk or the blackholes.us dnsbl to stop that chinese crap be it 'paid' or 'unauthorised' unpaid chinese spam.

China has a major image problem - 'saving face' isnt the the solution anymore, mind you they rather liked Robert Soloways 'debt'. I personally expect little to change.

23 June: More news about Robert 'Solon' (Soloway in Swedish I believe). Which was Posted by Mr Braver on his website, and cc'ed to Nanae. Is this Appear Pro Hac Vice (pdf) which in non legal goboblygook means another lawyer on the scene. Mr Trobermann (lawyer one) it appears is not working out.

So who is this 'new brain' whom we discover is a "long term aqquantance" of the Soloways? Well 23 days is it appears a bit of stretch for the above claim but thats joke one for today inserted.

Meet Carl A. Tony Capozzola (image credit to Ed see Italian American lawyers Association * Tony is standing on the left hand side)the name not ring any bells?.

A well-known South Bay attorney ventured into the world's biggest criminal case Tuesday by filing briefs with the state Supreme Court on behalf of Michael Jackson that allege the pop star is the target of an overzealous prosecution.

It is interesting to note while the above motion failed for wacko jacko, Robert and Michael Jackson fall into to the category 'foolish', I like the professors commenting in the article that 'it's good pr'. I suppose Mr Capozzola has to sing and dance and this certainly won't be the last occassion that the fool is abused for Mr Capozzola's benefit.

His expected line of attack is pitifull. Anyhow what do we know about Roberts new freind of 23 days California bar 44441 (links provided by Ed and Sky) is that for six years he was suspended and did something else. Sounds interesting so lets dig some more shall we this is from March 2003.

"Scotti pulled out a .38-caliber handgun, shot and killed Feldman and committed suicide," police Sgt. Peter Grimm said. Capozzola, who witnessed the shootings, was not hurt.

Keeping some interesting company there Carl A. Tony Capozzola - then again having to google this Ted Binion. But i suppose thats the price of 'fame'. * has a 'mirthfull' connotation.

Court it will appear will be very entertaining on the 6th August.

19 June: Henrik in Opsan informs us all of Spamsuite.com document 153 Essentially that answers a number of questions.

A drug dealer like dirty money operation where assets moved from the USA to Sweden where Robert apparently has family and Swedish nationality (Robert always claimed this but never mention the origin - but I was way off base from my 'Hungary' record search).

An interesting use of impressionable people.

Items admitted for trial use with generally no objections by Soloway's Lawyer - it be interesting to see if he ever gets paid. Anyhow I feel a letter to the swedish embassy c/o the swedish tax authorities coming along.

I do recommend a read of document 153, for all the things that I did not mention. The thought 'bank fraudster' seems to be a new on reflection concur ?.

18 June: After seeking counsel and hearing nothing negative i present ... At home with the Soloways I doubt mtv will pick it up. (humour).

Herb S Marc Soloway (67) and Rachelle D Soloway (59) now live in Palm Desert, California USA . It appears that a Henry Soloway (age 90) lives with them along with a person named Karin B Soloway (aged 64).

A map Google Maps OK - Want a telephone number ? easy phonebook: Soloway Palm Desert,CA (opens in new window). Some results just in case they get removed (760) 772-1148 (760) 772-2638 (760) 772-3618 (760) 345-7389. - Remember those are american numbers, your going to need international access codes and country id's if your not America based.

Sons and Daughters wise - it appears theres three (3 is conjecture) a Thomas Paul Soloway age 40 who lives in San Francisco, an easy association (with less conjecture more confidence) is for a female named Jill K Soloway (no not the Hollwood writer (different mother by the name of Elane - thats somewhere in Chicago i think).

Finally back on topic we get to Robert Soloway age 27 is is junior son to Rachelle (thats the easy confirmation). My assumptions

Thank you to peoplefinder.com Where i base this 'evidence' on.

Bananas in the Falklands would like to wish Herb Soloway a welcome to the page since he seems most likey a candidate for the title 'Father'. Ancient history (1999) appended to the bottom of the file.

13 June: Are you thinking this ? somebody else was

Thanks to Mr Lindford for spotting.

Oh my the entertainment continues! Ed in Opsan jast happens to mention that Robert is Named as a 'bot herder' by our friends in the fbi, which sounds quite kinky considering that Robert was refused bail again. A big thank you must be said here for Mr Schmutz.

The FBI has also charged numerous individuals with cyber crimes around the nation as a direct result of the coordinated operation, including: * Robert Alan Soloway of Seattle, Washington, is accused of using botnets to send tens of millions of spam messages touting his website; * James C. Brewer of Arlington, Texas, is accused of infecting tens of thousands of computers worldwide, including some at Chicago-area hospitals; and * Jason Michael Downey of Covington, Kentucky, is charged with using botnets to disable other systems.

Now then, court today too and back to pokey Spamsuite.com document 140 Rachel Soloway lives in Palm Desert, California. But rejected by the Judge (seattle times) source. Credit to Super fan Henrik and Ed over at opsan.

Judge James Donohue sided with the government in ordering that Soloway should be detained until his trial, which is scheduled to begin Aug. 6.

Where is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293 The Robert Soloway Locator url.

Hehe !

12 June: No Digging today - look my wellies are clean !

But an Opsan update on Roberts Lawyer Richard J. Troberman..

I have asked http://www.ait.com/ for there views on on being a Bob Soloway support (think Chinese front man). Ive yet to ask Cologuys (2005) seems to be Korea hosting, MDMS (Seattle ISP seems very pro spam) or Nobullservers also points to China (as a sales front man). Gasper the owner didn't wish to talk shop when I broached the subject.

I suggest that these suppliers be treated with caution as possibly spam friendly. Links to Mr Soloway and them can be identified in the many pdf documents referenced to recently in this document.

08 June: Henrik informs us in Opsan about http://spamsuite.com/node/123 - see 130 131 also Trial is set for 6 August 2007 (might change re yesterday). Good news is Robert has no computers, money, or spam lists (unless hidden) should he be granted bail.

2nd court impression.

Where is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293v From Nanea.

DC SeaTac The Federal Detention Center (FDC) - Sea Tac in Seattle, Washington, is an administrative facility housing male and female inmates.

FDC SeaTac is located 12 miles south of Seattle and 16 miles north of Tacoma, 1 mile west of Interstate 5 (200th Street exit).

Judicial District: Western Washington

INMATE NAME & REGISTER NUMBER
ROBERT ALAN SOLOWAY  	37427-086
FDC SEATAC
FEDERAL DETENTION CENTER
P.O. BOX 13900
SEATTLE, WA  98198
USA
 

you know what to send.....

07 June: Super Fan Henrik informs us via Opsan (see top link) here (kndo.com) that things are delayed until next Monday (11th) since it would appear that Robert legal 'team' are seeking extra time.

Komo TV's take on the matter: (link to source in new window requires flash)

Thank you to Bernzilla.com for the xhtml valid tip.

Flood the Spambox also has been told that the case has a federal dimension rather than a state only prosecution.

Admin notes: Thank you to Andy for the new domain name thisfool.com and the hosting off googlepages. I have backups of the page, and will continue to update both as long as i have ftp access. The map projects (or geo-location) are essentially dead projects. The map files will remain available for viewing.

05 June: Last style of message before our friends at the fbi shut our spammer down, notice user who recieves the mail also sent it, the diferent ip addresses and that 222.255.2.134 is somewhere in Vietnam which belongs to the VietNam Data Communication Company.

Delivered-To: user&gmail.com
Received: by 10.114.240.2 with SMTP id munged;
        Tue, 29 May 2007 20:40:12 -0700 (PDT)
Received: by 10.100.13.12 with SMTP id munged.grunge;
        Tue, 29 May 2007 20:40:11 -0700 (PDT)
Return-Path: <user&gmail.com>
Received: from 209.85.133.114 ([222.255.2.134])
        by mx.google.com with SMTP id munged.2007.05.29.20.40.02;
        Tue, 29 May 2007 20:40:11 -0700 (PDT)
Received-SPF: neutral (google.com: 222.255.2.134 is neither permitted nor denied by domain of munged&gmail.com)
Date: Tue, 29 May 2007 20:40:11 -0700 (PDT)
Message-Id: <munged.SMTPIN_ADDED&mx.google.com>
To: <user&gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--"

----
Content-Transfer-Encoding: quoted-printable

<html><body bgcolor=3D"#AFCDFF"><div align=3D"center"><center>
<table border=3D"1" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-co=
llapse: collapse" bordercolor=3D"#111111" width=3D"65%" id=3D"AutoNumber1"=
 height=3D"217" bgcolor=3D"#FFFFFF">
<tr><td width=3D"100%" align=3D"center" height=3D"217">
<p align=3D"center"><font size=3D"5" face=3D"Arial">We Email Advertise You=
r Charity Web Site to<BR>
<font color=3Dred><b>15,000,000 PEOPLE FOR FREE!</font></a></p><p align=3D=
"center"><font size=3D"5" face=3D"times new roman">
<a href=3D"http://www.emailbroadcastauthority.com">[CLICK HERE]</a></font>=
</p>
</td></tr></table></center></div></body></html>

------

For the record you know - that html sucks big time.

04 June:

Sorry no digging today cheers!

nim-company.com (seo op of mr Soloway) which is still with us, if you want to have some fun ring InternetNamesForBusiness in the USA on (954)-323-0075 and tell them Robert won't be paying his hosting bill. Dont dive them your email since they might well be ok sending you spam and they are Florida based which bodes badly in spam circles.

More on the case against Robert as i get it. Seattlepi reports lots of luxury goods found (rumour he was ebaying them in nanea) so they might be fakes, and he just bought a new Mercedes Benz (im told from an anon source). Something to look out for at the government IRS auction i think if your so inclined and live in WA/OR west coast states in the usa.

Anyhow thats all for now, cheers ! I still want a picture of Robert Soloway, Racheal Soloway (mother) and any of other family Soloway clan if you can help I would be very pleased.

01 June: A big hello to all the new visitors and welcome but for some of us the work continues.

There are a number of outstanding domains with hosting from monday (China and Bangladesh) that we need to account for since the taxman,post office,fbi etc seized Roberts assets.

Along with the search optimizing engine businesses (two) which have there own bits of dubious fame. China/Bangladesh bases: emailbroadcastauthority.com submit-me-now.com (seo spam op) permissionemailcorp.com emailsolutioncorp.com emailmarketingassociates.com theemailadvertisingcompany.com emailbroadcastingcompany.com and american based hoster nim-company.com (seo spam op).

lets start with the seo operations first

;; Query time: 550 msec
;; SERVER: boris
;; WHEN: Thu May 31 17:06:45 2007
;; MSG SIZE  rcvd: 164

Registrant: 
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Email: d595683c0a1e672a00a6d77116f9399f@domaindiscreet.com

   Registrar Name....: REGISTER.COM, INC.
   Registrar Whois...: whois.register.com
   Registrar Homepage: www.register.com 

   Domain Name: nim-company.com

      Created on..............: Wed, Jul 26, 2006
      Expires on..............: Thu, Jul 26, 2007
      Record last updated on..: Mon, May 21, 2007

   Administrative Contact:
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Phone: 1-902-7495331
      Email: d595683c0a1e672a01ba25e6a0694171@domaindiscreet.com

   Technical Contact:
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Phone: 1-902-7495331
      Email: d595683d0a1e672a002d22dfd5791c5d@domaindiscreet.com

   DNS Servers:

   dns11.register.com
   dns12.register.com

dig www.nim-company.com

; <<>> DiG 9.3.4 <<>> www.nim-company.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52016
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.nim-company.com.           IN      A

;; ANSWER SECTION:
www.nim-company.com.    14400   IN      CNAME   nim-company.com.nim-company.com.
nim-company.com.nim-company.com. 14400 IN A     69.49.96.12

;; AUTHORITY SECTION:
nim-company.com.        43200   IN      NS      dns11.register.com.
nim-company.com.        43200   IN      NS      dns12.register.com.

;; ADDITIONAL SECTION:
dns11.register.com.     17812   IN      A       216.21.234.76
dns12.register.com.     30945   IN      A       216.21.226.76

 whois 69.49.96.12
[Querying whois.arin.net]
[whois.arin.net]

OrgName:    InternetNamesForBusiness.com 
OrgID:      INFB
Address:    500 East Broward Boulevard
Address:    Suite 1700
City:       Fort Lauderdale
StateProv:  FL
PostalCode: 33394
Country:    US

NetRange:   69.49.96.0 - 69.49.127.255 
CIDR:       69.49.96.0/19 
NetName:    MEGA-3
NetHandle:  NET-69-49-96-0-1
Parent:     NET-69-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MEGANAMESERVERS.COM
NameServer: NS3.MEGANAMESERVERS.COM
Comment:    
Comment:    -
RegDate:    2003-05-22
Updated:    2004-12-13

RTechHandle: ZI51-ARIN
RTechName:   InternetNamesForBusiness 
RTechPhone:  +1-954-323-0075
RTechEmail:  admin@internetnamesforbusiness.com 

OrgTechHandle: ZI51-ARIN
OrgTechName:   InternetNamesForBusiness 
OrgTechPhone:  +1-954-323-0075
OrgTechEmail:  admin@internetnamesforbusiness.com

US Based - down in spammy Florida. Host up. Now lets do the other which was in China if I remember correctly (it as some time ago) was called submit-me-now.com

 whois submit-me-now.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]

[whois.dns.com.cn]

Domain Name.......... submit-me-now.com
  Creation Date........ 2006-11-21 03:30:28
  Registration Date.... 2006-11-21 03:30:28
  Expiry Date.......... 2007-11-21 03:30:28
  Organisation Name.... liu fei
  Organisation Address. nan chang
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 321000
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu fei
  Admin Address........ nan chang
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 321000
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@makemelogo.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu fei
  Tech Address......... nan chang
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 321000
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@makemelogo.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu fei
  Bill Address......... nan chang
  Bill Address.........
  Bill Address......... nan chang     
  Bill Address......... 321000    
  Bill Address......... JX     
  Bill Address......... CN   
  Bill Email........... admin@makemelogo.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn

;; ANSWER SECTION:
www.submit-me-now.com.  3600    IN      A       124.42.8.163

whois 124.42.8.163
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-AP
tech-c:       WH271-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
changed:      hm-changed@apnic.net 20060109
source:       APNIC

person:       Chen hao
nic-hdl:      CH471-AP
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Wang Huijun
nic-hdl:      WH271-AP
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-CN
tech-c:       WH271-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MANT-CN-SINNET
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20060112
source:       CNNIC

person:       Chen hao
nic-hdl:      CH471-CN
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20030328
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Wang Huijun
nic-hdl:      WH271-CN
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20060313
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Nobody home in China have our friends the Maoist's killed his connections already ?. Thats the seo out of the way. Now the main event.

 whois emailbroadcastauthority.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastauthority.com
  Creation Date........ 2006-09-12 22:42:08
  Registration Date.... 2006-09-12 22:42:08
  Expiry Date.......... 2007-09-12 22:42:08
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang     
  Bill Address......... 210002    
  Bill Address......... JX     
  Bill Address......... CN   
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.emailbroadcastauthority.com
  Name Server.......... ns3.emailbroadcastauthority.com
  Name Server.......... ns2.emailbroadcastauthority.com
  Name Server.......... ns1.emailbroadcastauthority.com

dig www.emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

 dig www.emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

;; ANSWER SECTION:
ns1.emailbroadcastauthority.com. 27774 IN A     218.106.165.183

;; AUTHORITY SECTION:
emailbroadcastauthority.com. 43126 IN   NS      ns1.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns2.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns3.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns4.emailbroadcastauthority.com.

China (218.106.165.160 - 218.106.165.191 beijing-shengang-corp) says goodbye to Bob - no www. Lets try permissionemailcorp.com next

 whois permissionemailcorp.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... permissionemailcorp.com
  Creation Date........ 2006-11-17 21:43:02
  Registration Date.... 2006-11-17 21:43:02
  Expiry Date.......... 2007-11-17 21:43:02
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.permissionemailcorp.com
  Name Server.......... ns3.permissionemailcorp.com
  Name Server.......... ns2.permissionemailcorp.com
  Name Server.......... ns1.permissionemailcorp.com

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

Nobody home there either never mind plenty more. Lets take a look at emailsolutioncorp.com

>> whois emailsolutioncorp.com -hwhois.dns.com.cn[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailsolutioncorp.com
  Creation Date........ 2006-11-17 21:43:07
  Registration Date.... 2006-11-17 21:43:07
  Expiry Date.......... 2007-11-17 21:43:07
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailsolutioncorp.com
  Name Server.......... ns3.emailsolutioncorp.com
  Name Server.......... ns2.emailsolutioncorp.com
  Name Server.......... ns1.emailsolutioncorp.com

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183

;; AUTHORITY SECTION:
emailsolutioncorp.com.  43200   IN      NS      ns4.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns1.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns2.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns3.emailsolutioncorp.com.

;; ADDITIONAL SECTION:
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

emailsolution.com. is bye bye never fear for emailmarketingassociates.com has to be bullet chinese spam proof. You know the routine....

whois emailmarketingassociates.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailmarketingassociates.com
  Creation Date........ 2006-11-17 21:43:12
  Registration Date.... 2006-11-17 21:43:12
  Expiry Date.......... 2007-11-17 21:43:12
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.926817a885d86e1.com
  Name Server.......... ns3.926817a885d86e1.com
  Name Server.......... ns2.926817a885d86e1.com
  Name Server.......... ns1.926817a885d86e1.com

[sjwest@mail2 ~]$ dig  emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1018
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

Nobody home there either dont worry two more left so lets try theemailadvertisingcompany.com

Domain Name ..................... theemailadvertisingcompany.com
Name Server ..................... dns13.hichina.com
                                  dns14.hichina.com
Registrant ID ................... hc380703102-cn
Registrant Name ................. ff ff
Registrant Organization ......... fff
Registrant Address .............. shanxi
Registrant City ................. shanxi
Registrant Province/State ....... shanxi
Registrant Postal Code .......... 100000
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.0101000000 - 
Registrant Fax .................. +86.100000000000 - 
Registrant Email ................ leohosting@hotmail.com
Administrative ID ............... hc880703102-cn
Administrative Name .............  DaGang
Administrative Organization ..... 
Administrative Address .......... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Administrative City ............. Beijing
Administrative Province/State ... Beijing
Administrative Postal Code ...... 100085
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.01062969470 - 
Administrative Fax .............. +86.01062969470 - 
Administrative Email ............ postmaster@2ndDNS.com
Billing ID ...................... hc367443358-cn
Billing Name ....................  DaGang
Billing Organization ............ 
Billing Address ................. No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100085
Billing Country Code ............ CN
Billing Phone Number ............ +86.01062969470 - 
Billing Fax ..................... +86.01062969470 - 
Billing Email ................... postmaster@2ndDNS.com
Technical ID .................... hc680703102-cn
Technical Name ..................  DaGang
Technical Organization .......... 
Technical Address ............... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100085
Technical Country Code .......... CN
Technical Phone Number .......... +86.01062969470 - 
Technical Fax ................... +86.01062969470 - 
Technical Email ................. postmaster@2ndDNS.com
Expiration Date ................. 2008-02-27 10:13:25

dig www.theemailadvertisingcompany.com

; <<>> DiG 9.3.4 <<>> www.theemailadvertisingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63456
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.theemailadvertisingcompany.com. IN A

;; ANSWER SECTION:
www.theemailadvertisingcompany.com. 3600 IN CNAME super2007.gnway.net.
super2007.gnway.net.    60      IN      A       127.0.0.1

;; AUTHORITY SECTION:
gnway.net.              3600    IN      NS      ns1.gnway.cn.
gnway.net.              3600    IN      NS      ns1.gnway.com.

;; ADDITIONAL SECTION:
ns1.gnway.cn.           1198    IN      A       210.51.190.207
ns1.gnway.com.          30540   IN      A       211.154.44.236

;; Query time: 2788 msec
;; SERVER: 212.23.3.100#53(212.23.3.100)
;; WHEN: Thu May 31 18:02:49 2007
;; MSG SIZE  rcvd: 183

No luck there - we are running out of magic spam bullets here. Lets all say the magic words (email advertise for free) )as we try the last emailbroadcastingcompany.com.

 whois emailbroadcastingcompany.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:46
  Registration Date.... 2006-11-17 21:42:46
  Expiry Date.......... 2007-11-17 21:42:46
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailbroadcastingcompany.com
  Name Server.......... ns3.emailbroadcastingcompany.com
  Name Server.......... ns2.emailbroadcastingcompany.com
  Name Server.......... ns1.emailbroadcastingcompany.com

dig www.emailbroadcastingcompany.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastingcompany.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

Damm you didnt say the magic bullet proof words dead too. Well our Chinese spam friends work fast when they need to.

31 May: New visitors hello - further updates from 31 may onwards can be seen by pressing the 'page up' key - This page takes a long time to load. but Woohoo !!!!!! its a start http://www.king5.com/localnews/stories/
NW_05307WABinternetspamindictmentTP.26000383.html and http://seattlepi.nwsource.com/
local/317795_soloway31.html not convicted yet but a start a more cluefull news item from nntp and spamhaus sayeth:

U.S. Department of Justice

United States Attorney
Western District of Washington

700 Stewart Street, Suite 5220Tel: (206) 553-7970
Seattle, Washington 98101-1271Fax: (206) 553-0882


FOR IMMEDIATE RELEASE
May 30, 2007

PRESS CONFERENCE ON SPAM KING INDICTMENT

The U.S. Attorneys Office will hold a press conference following the 
arrest of 27-year-old ROBERT ALAN SOLOWAY. SOLOWAY was indicted last 
week by a federal grand jury in Seattle in connection with his illegal 
spamming activities.

The press conference will begin at 1:30 in the Wales Conference Room of 
the U.S. Attorneys Office. United States Attorney Jeffrey C. Sullivan 
will be joined by representatives from the United States Postal 
Inspection Service (USPIS), FBI, FTC, Internal Revenue Service Criminal 
Investigations (IRS-CI), and Washington State Attorney Generals Office.

SOLOWAY will make his initial appearance in U.S. District Court at 2:30 
today. Copies of the indictment will be available at the press 
conference or are online via the PACER system.

Now thats good news and six governmental bodies wanting a piece of Bob. Futher stuff Detention Order (PDF) Indictment (PDF) and press release (seen above PDF)

Indictment is a great read and details wire fraud,id theft, sezure of funds etc - Pontential for 65 years !!!. MDS (Seattle isp) get a mention (noted here), 'Colo Guys' and NoBull yet to be be mentioned. I will dig more on those two names.

Big Thanks to the inner sanctum, and everybody whom helped maked this happen eventually.

? support@cologuys.com Cologuys Phone: 1-866-510-5799,Fax: 1-866-218-1533 8101 Chapin Rd,Fort Worth, TX 76116,USA other NoBull Server Hosting - nobullservers.com (usa 586) 5560823

28 May: There seem to be a lot of Mondays in May and yes its digging day again. Start time:

;; Query time: 486 msec
;; SERVER: Boris
;; WHEN: Mon May 28 13:02:12 2007
;; MSG SIZE  rcvd: 197

Dns bot net (only one this week again).

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183 [china-netcom.com]
;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns4.926817a885d86e1.com. 43200  IN      A       68.188.83.59 [usa: charter.net]

Supplementary: 
ns1.926817a885d86e1.com. 43200  IN      A       87.243.166.122 [austria (eu): abuse@ainet.at]

;; AUTHORITY SECTION:
926817a885d86e1.com.    43200   IN      NS      ns2.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns3.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns4.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns1.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns2.926817a885d86e1.com. 43200  IN      A       66.66.32.40   [usa: rr.com]
ns3.926817a885d86e1.com. 43200  IN      A       70.235.18.100 [usa: at&t]
ns4.926817a885d86e1.com. 43200  IN      A       71.81.227.244 [usa: charter.net]

Normal dns with spammy providers (most seen before)

dig emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> emailbroadcastauthority.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37812
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailbroadcastauthority.com.   IN      A

;; ANSWER SECTION:
emailbroadcastauthority.com. 3600 IN    A       124.254.29.136 [cn: 163.com marcom@service.netease.com]

;; AUTHORITY SECTION:
emailbroadcastauthority.com. 23026 IN   NS      ns4.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns1.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns2.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns3.emailbroadcastauthority.com.

;; ADDITIONAL SECTION:
ns1.emailbroadcastauthority.com. 23026 IN A     218.106.165.183 china-netcom.com
ns2.emailbroadcastauthority.com. 23026 IN A     124.254.29.136 [cn: 163.com marcom@service.netease.com]
ns3.emailbroadcastauthority.com. 23026 IN A     221.194.44.60   cn: cnc-noc.net
ns4.emailbroadcastauthority.com. 23026 IN A     202.92.63.166  [bd * seen before]


ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [cn: 163.com marcom@service.netease.com (Nasdaq:NTES)]

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [cn: cnc-noc.net]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn: Chinese govt:wangwl@bsw.gov.cn seen before]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166  [bd * seen before]

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183 [cn: cnc-noc.net]

;; AUTHORITY SECTION:
emailsolutioncorp.com.  43200   IN      NS      ns1.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns2.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns3.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns4.emailsolutioncorp.com.

;; ADDITIONAL SECTION:
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82 [cn: Chinese govt:wangwl@bsw.gov.cn *seen before]
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60 cn: cnc-noc.net
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166 [bd: *seen before]

Unloved but still hosted in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007052302 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

An end time.

Query time: 4548 msec
;; SERVER: boris
;; WHEN: Mon May 28 13:08:24 2007
;; MSG SIZE  rcvd: 113

Of note: New hoster not seen before from Austria (part of the bot net)

inetnum:        87.243.166.0 - 87.243.166.255
netname:        KOEFLACH-TV
descr:          Ainet Telekommunikations-Netzwerk Betriebs GmbH
country:        AT
admin-c:        ANOC9-RIPE
tech-c:         ANOC9-RIPE
status:         ASSIGNED PA
mnt-by:         AINET-MNT
source:         RIPE # Filtered

role:           Ainet Network Operations Center
address:        Ainet Telekommunikations-Netzwerk Betriebs GmbH
address:        Burggasse 15
address:        A-8750 Judenburg
address:        Austria
e-mail:         noc@ainet.at

Usual suspects - Bangalesh seems to be developing a long term problem.

24 May: Sky at Opsan (see top link) informs us that 163.com 's parent company netease.com (Nasdaq: NTES) in China would love to hear from us all at marcom@service.netease.com.

Thank you again for the spam cop reports.

21 May: Its the Chelsea Flower show for some, but for Bananas in the Falklands it's not for me and its digging day again. Start time:

;; Query time: 388 msec
;; SERVER: boris
;; WHEN: Mon May 21 12:24:57 2007
;; MSG SIZE  rcvd: 197

Normal dns with spammy providers (most seen before)

emailbroadcastauthority.com. 3600 IN    A       124.254.29.136
ns1.emailbroadcastauthority.com. 25911 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 25911 IN A     124.254.29.136
ns3.emailbroadcastauthority.com. 25911 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 25911 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Dns bot net (only one this week) not the usual two.

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns3.926817a885d86e1.com. 43200  IN      A       75.31.75.60

Unloved but still hosted in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

An end time.

;; Query time: 401 msec
;; SERVER: boris
;; WHEN: Mon May 21 12:34:22 2007
;; MSG SIZE  rcvd: 113

Fin.

17 May: Two 'new and improved retard proof' spam messages ahoy from comrade Robert i see from Spamcop (Thank you).

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

non-commercial offer is for charity web sites only.

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

non-commercial offer is for charity web sites only.

Nice to have a change.

16 May: emailbroadcastauthority.com up after its hiccup I note

ns4.emailbroadcastauthority.com. 3600 IN A      124.254.29.136
ns1.emailbroadcastauthority.com. 42119 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 42119 IN A     124.254.29.136
ns3.emailbroadcastauthority.com. 42119 IN A     221.194.44.60

Atg and Ed dig beyond the ip address and location for the company behind 163.com who help Robert.

163.com.                1903    IN      NS      ns.nease.net.
163.com.                1903    IN      NS      ns3.nease.net.
;; ADDITIONAL SECTION:
ns.nease.net.           40545   IN      A       202.106.185.75
ns3.nease.net.          19216   IN      A       220.181.28.3

Registrant:
   	Netease.com, Inc. 
   	36/F Peace World Plaza, No.362-366
   	Huan Shi Dong Road
   	Guangzhou, Guangdong 510060
   	CN
  	 
Domain Name: NEASE.NET
 
   	Administrative Contact , Technical Contact : 	 
   	Netease.com, Inc. 
   	nsadmin@corp.netease.com
   	36/F Peace World Plaza, No.362-366
   	Huan Shi Dong Road
   	Guangzhou, Guangdong 510060
   	CN
   	Phone: +86-20-85525516
   	Fax: +86-20-85525535
  	 
   	Record expires on 04-Apr-2009 	
   	Record created on 06-Jul-1997
   	Database last updated on 27-Jun-2006
 

Its very Chinese affair, listed on Nasdaq as NTES (NetEase.com, Inc) try the bottom links for English which it says it was founded by a William Ding (William Lei Ding) who also is its Chief Executive morfe follows...

NetEase also remains the largest email provider in China, approved by the Chinese authorities to operate as an Internet content provider along with the Ling Yi company ... legally owned by three citizens of China: the principal shareholder of the Company, his brother and a former employee of the Group.

Prior link to Rupert Murdoch (The News Corporation Limited “Newscorp”) and PricewaterhouseCoopers do there auditing. Employee numbers it appears are unstated.

14 May: Gardening time usual Lets start with a start time.

;; Query time: 32 msec
;; SERVER: boris
;; WHEN: Mon May 14 18:37:21 2007
;; MSG SIZE  rcvd: 155

A down domain name emailbroadcastauthority.com

<<>> DiG 9.3.4 <<>> ns1.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

Going bot net ? next up is permisisonemailcorp.com - ns1.permissionemailcorp.com. 43200 IN A 124.254.44.66 not happy

ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Bot nets ahoy (the usual 2)

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns3.926817a885d86e1.com. 43200  IN      A       75.0.146.214

;ns1.emailbroadcastingcompany.com. IN   A

;; ANSWER SECTION:
ns1.emailbroadcastingcompany.com. 180 IN A      24.175.186.203
ns1.emailbroadcastingcompany.com. 180 IN A      64.22.246.49
ns1.emailbroadcastingcompany.com. 180 IN A      69.219.226.151
ns1.emailbroadcastingcompany.com. 180 IN A      69.227.22.150
ns1.emailbroadcastingcompany.com. 180 IN A      71.203.52.220
ns1.emailbroadcastingcompany.com. 180 IN A      74.100.247.81
ns1.emailbroadcastingcompany.com. 180 IN A      85.210.159.149
ns1.emailbroadcastingcompany.com. 180 IN A      12.208.154.35
ns1.emailbroadcastingcompany.com. 180 IN A      24.72.226.61
ns1.emailbroadcastingcompany.com. 180 IN A      24.137.86.117

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns4.926817a885d86e1.com.

Unloved but in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

The end

;; Query time: 296 msec
;; SERVER: Boris
;; WHEN: Mon May 14 18:50:57 2007
;; MSG SIZE  rcvd: 298

7 May: Gardening time usual suspects it appears (thats Bangladesh and China). Lets start with a start time

;; Query time: 44 msec
;; SERVER: boris
;; WHEN: Mon May  7 12:24:20 2007
;; MSG SIZE  rcvd: 181

Our bot net, and (one new one from last monday) which Sky over at Opsan notes as all american hosts. God bless George W Bush for 'can-spam'.

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 38720  IN      A       68.206.193.209
ns2.926817a885d86e1.com. 22547  IN      A       75.71.156.72
ns3.926817a885d86e1.com. 38720  IN      A       24.12.137.170
ns4.926817a885d86e1.com. 38720  IN      A       68.114.199.93

emailbroadcastingcompany.com.  IN      A

;; ANSWER SECTION:
emailbroadcastingcompany.com. 180 IN    A       172.191.195.119
emailbroadcastingcompany.com. 180 IN    A       213.6.229.100
emailbroadcastingcompany.com. 180 IN    A       24.116.250.66
emailbroadcastingcompany.com. 180 IN    A       58.106.118.114
emailbroadcastingcompany.com. 180 IN    A       65.190.181.102
emailbroadcastingcompany.com. 180 IN    A       66.67.219.205
emailbroadcastingcompany.com. 180 IN    A       68.77.55.65
emailbroadcastingcompany.com. 180 IN    A       69.4.104.153
emailbroadcastingcompany.com. 180 IN    A       69.105.139.212
emailbroadcastingcompany.com. 180 IN    A       76.188.39.239

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns4.926817a885d86e1.com.

no A, nameservered

ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.140
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

The unloved and a finish time

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

;; Query time: 226 msec
;; SERVER: boris
;; WHEN: Mon May  7 12:30:24 2007
;; MSG SIZE  rcvd: 294

6 May: I will be digging tomorrow (bet your all excited by that), but i note from the spamcop reports I am getting that Robert is doing it for 'FREE' Hmmm something going on ? Speaking of president@usakia.org has gone very quiet. Thank you for the spamcop reports for the map * is looking very colourfull now for those of you who prefer graphical things to lists.

* The number of countries whom have a claim that america is invovled in terrorising them is growing, lets hope Finland declares war (my latest read flag) on Seattle and Washington state for the damage caused in the Robert Soloway name.

Personally speaking i'm looking forward to seeing a Robert Spam sent from a computer in Zimbabwe in africa.

Remember to bring spades and wellington boots for the gardening if your going to join us tomorrow.

1 May: Time to go gardening, Spade in hand and the Chinese plant book in the other let go and discover that species known as the bullet proof spam hoster (ilikeeyspammer).

Boring stuff follows

emailbroadcastauthority.com. 3600 IN    A       124.254.29.140
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.140
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Bob's Bot net

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 43200  IN      A       206.188.126.28
ns2.926817a885d86e1.com. 43200  IN      A       68.54.156.163
ns3.926817a885d86e1.com. 43200  IN      A       91.105.34.191
ns4.926817a885d86e1.com. 43200  IN      A       24.12.0.46

Unloved by Bob, but tended to by a china man, and a dns time stamp.

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

;; Query time: 374 msec
;; SERVER: boris
;; WHEN: Tue May  1 16:58:39 2007
;; MSG SIZE  rcvd: 113

Concludes so you can wake up now.

28 April: Well well well make of this what you please.

Name: Vincent Bartning
E-mail: president@usakia.org
City: San Jose
Country: CA
Homepage: http://usakia.org

I don't think you should be listing charities

without confirming the accusation.  We would

like ours removed.

Those of you 'lost' as to what this refers to charities 'helped' by the great man (thats Robert) i would like to remind Vincent that i contacted his organisation (and the others i could id) to ask them about the claim but heard nothing back.

So Mr Bartning the link remains - please do feel free to ignore this, - or write me something so i can justify removing it. I look forward to hearing from you whenever.

As to the other message - Bob is rather 'impotent' on that matter. Analogy: more gas, no power - refer your friend to Opsan my friend the point is made there.

24 April: Its tuesday so its a digging day. Fun stuff first - botnet (1) update.

emailmarketingassociates.com. 180 IN    A       76.168.228.180
emailmarketingassociates.com. 180 IN    A       76.178.75.250
emailmarketingassociates.com. 180 IN    A       203.45.14.119
emailmarketingassociates.com. 180 IN    A       60.224.128.45
emailmarketingassociates.com. 180 IN    A       68.74.207.182
emailmarketingassociates.com. 180 IN    A       71.71.27.75
emailmarketingassociates.com. 180 IN    A       71.155.233.43
emailmarketingassociates.com. 180 IN    A       71.206.87.0
emailmarketingassociates.com. 180 IN    A       75.9.58.249
emailmarketingassociates.com. 180 IN    A       75.41.66.71

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 41759  IN      A       76.177.123.116
ns4.926817a885d86e1.com. 41759  IN      A       69.231.73.91

Usual suspects below - Bangladesh and China mostly

ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.141
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

ns1.emailbroadcastingcompany.com. 34962 IN A    218.106.165.183
ns2.emailbroadcastingcompany.com. 34962 IN A    124.254.29.136
ns3.emailbroadcastingcompany.com. 34962 IN A    221.194.44.60
ns4.emailbroadcastingcompany.com. 34962 IN A    202.92.63.166

Comparitively unloved (1) compared to the above and the date stamp. Again its China.

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

WHEN: Tue Apr 24 09:48:11 2007
;; MSG SIZE  rcvd: 198

This concludes the gardening, of interest (should you be awake) is that while thats a number of variations on the name theme, we only have one botnet (see previous entry for details of its status then) rather than several to deal with. All domains registered in China too.

Thank you for the spamcop reports, it would be nice for some Bob spam to come from Africa if you take a look at spam bot map but overall things are filling up nicely if your into graphical rather textual lists of where.

19 April: Depending upon your dns Ed reports we have a new spambot for dns on emailbroadcastingcompany.com called 926817a885d86e1.com so copy and paste those random letters and let the fun begin.

whois 926817a885d86e1.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... 926817a885d86e1.com
  Creation Date........ 2007-03-12 22:25:21
  Registration Date.... 2007-03-12 22:25:21
  Expiry Date.......... 2008-03-12 22:25:21
  Organisation Name.... xiaowen
  Organisation Address. No.12 chang'an road
  Organisation Address.
  Organisation Address. beijing
  Organisation Address. 100001
  Organisation Address. BJ
  Organisation Address. CN

Admin Name........... ash wen
  Admin Address........ No.12 chang'an road
  Admin Address........
  Admin Address........ beijing
  Admin Address........ 100001
  Admin Address........ BJ
  Admin Address........ CN
  Admin Email.......... 112@126.com
  Admin Phone.......... +86.109838384
  Admin Fax............ +86.109838387

Tech Name............ ash wen
  Tech Address......... No.12 chang'an road
  Tech Address.........
  Tech Address......... beijing
  Tech Address......... 100001
  Tech Address......... BJ
  Tech Address......... CN
  Tech Email........... 112@126.com
  Tech Phone........... +86.109838384
  Tech Fax............. +86.109838387

Bill Name............ ash wen
  Bill Address......... No.12 chang'an road
  Bill Address.........
  Bill Address......... beijing     
  Bill Address......... 100001    
  Bill Address......... BJ     
  Bill Address......... CN   
  Bill Email........... 112@126.com
  Bill Phone........... +86.109838384
  Bill Fax............. +86.109838387
  Name Server.......... ns4.926817a885d86e1.com
  Name Server.......... ns3.926817a885d86e1.com
  Name Server.......... ns2.926817a885d86e1.com
  Name Server.......... ns1.926817a885d86e1.com

dig 926817a885d86e1.com

; <<>> DiG 9.3.4 <<>> 926817a885d86e1.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3281
;; flags: qr rd ra; QUERY: 1, ANSWER: 10, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;926817a885d86e1.com.           IN      A

;; ANSWER SECTION:
926817a885d86e1.com.    180     IN      A       72.241.80.119  -BUCKEYECOM.NET usa
926817a885d86e1.com.    180     IN      A       75.46.59.116   -sbc - usa
926817a885d86e1.com.    180     IN      A       75.73.225.114  -comcast usa
926817a885d86e1.com.    180     IN      A       76.181.187.227 -rr.com usa
926817a885d86e1.com.    180     IN      A       24.155.47.188  -Grande Communications Networks, Inc ? usa ?
926817a885d86e1.com.    180     IN      A       68.126.198.229 -sbc usa
926817a885d86e1.com.    180     IN      A       71.9.38.229    -charter usa
926817a885d86e1.com.    180     IN      A       71.198.13.0    -comcast usa
926817a885d86e1.com.    180     IN      A       71.205.236.169 -comcast usa
926817a885d86e1.com.    180     IN      A       72.184.82.147  -rr.com usa

;; AUTHORITY SECTION:
926817a885d86e1.com.    28148   IN      NS      ns2.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns3.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns4.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns1.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 43200  IN      A       76.181.187.227 -rr.com usa
ns2.926817a885d86e1.com. 28148  IN      A       68.39.83.198   -comcast usa
ns3.926817a885d86e1.com. 43200  IN      A       68.126.198.229 -sbc usa
ns4.926817a885d86e1.com. 28148  IN      A       76.181.187.227 -rr.com usa

;; Query time: 257 msec
;; SERVER: boris
;; WHEN: Thu Apr 19 18:10:48 2007
;; MSG SIZE  rcvd: 333

Robert powz's quite a few americans pcs there. I'd guess theres a big spam run in the 'tubes' - and quite a few Japanese spambotted pc's too.

18 April: In the spirit of the file EMAILS.1519 (which i have a copy of) is re-activated in spirit. You know unsubscribe request that started this rather page - well Robert re-spammed the domain owner again and twice - (Sky in Opsan) gets credit for first mentioning this recently.

Image opens a closeup/

Once on, never off. - or for the clueless 'Once a spammer always a spammer'. I conclude that the 14 spams cleared by the user where also sent by Robert. Those doughnuts must be good - I would urge all WA state voters to elect a less fat State Attorney General.

17 April: Gardening time dont you think ?

emailbroadcastauthority.com. 3600 IN A     124.254.29.141
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.141
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007030501 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   A       124.254.29.141
ns1.emailbroadcastingcompany.com. 21235 IN A    218.106.165.183
ns2.emailbroadcastingcompany.com. 21235 IN A    124.254.29.141
ns3.emailbroadcastingcompany.com. 21235 IN A    221.194.44.60
ns4.emailbroadcastingcompany.com. 21235 IN A    202.92.63.166

Below just have name servers

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183
ns2.emailmarketingassociates.com. 43200 IN A    124.254.29.141
ns3.emailmarketingassociates.com. 43200 IN A    221.194.44.60
ns4.emailmarketingassociates.com. 43200 IN A    202.92.63.166

Result datestamp:
;; Query time: 348 msec
;; SERVER: boris
;; WHEN: Tue Apr 17 22:18:18 2007
;; MSG SIZE  rcvd: 198

Most of those ip's and hosters I recognise, and have been already documented here.

16 April: Dereliction of duty - somebody shoot me I failed to list emailbroadcastingcompany.com as Bob domain and not 'theemailbroadcastingcompany.com', in my defence it also was masked by some dns bots which kept the domain off the main lists by obsurity - it however got a mention on 23/01/2007 in the blog section. Sorry

I report as the domain is now spamming - updated stuff follows for emailbroadcastingcompany.com

whois emailbroadcastingcompany.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:46
  Registration Date.... 2006-11-17 21:42:46
  Expiry Date.......... 2007-11-17 21:42:46
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailbroadcastingcompany.com
  Name Server.......... ns3.emailbroadcastingcompany.com
  Name Server.......... ns2.emailbroadcastingcompany.com
  Name Server.......... ns1.emailbroadcastingcompany.com

dig www.emailbroadcastingcompany.com

; <<>>  DiG 9.3.4 <<>> www.emailbroadcastingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34978
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;www.emailbroadcastingcompany.com. IN   A

;; ANSWER SECTION:
www.emailbroadcastingcompany.com. 1004 IN A     124.254.29.141 *new 

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 28231 IN  NS      ns1.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns2.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns3.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns4.emailbroadcastingcompany.com.

;; ADDITIONAL SECTION:
ns1.emailbroadcastingcompany.com. 28231 IN A    218.106.165.183 [cn seen before]
ns2.emailbroadcastingcompany.com. 28231 IN A    124.254.29.141  *new see below
ns3.emailbroadcastingcompany.com. 28231 IN A    221.194.44.60   [cn seen before]
ns4.emailbroadcastingcompany.com. 28231 IN A    202.92.63.166   [bangladesh * seen before]

;; Query time: 59 msec
;; SERVER: Boris
;; WHEN: Mon Apr 16 19:51:02 2007
;; MSG SIZE  rcvd: 202

Thank you for the spamcop reports - host 124.254.29.141 is fresh to this page. - Gardening later this week. Admin note: Japan entries will not be shown on the map because the whois is rather vague if you dont read the local langauge. Japan spambots are still listed on this page, otherwise northern japan will look like a pork major processing plant. This bug affects ip to geolocation services too, if using 'western langauges.

 whois 124.254.29.141
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

11 April: Ed says opsan is ok, and Robert gains a few more fans here, and here too. so it's not just one or two people and an angry dog which somebody somewhere will no doubt claim.

Oddly enough a person by the name of Mark Pryor (us senate) starts thinking - see slashdot. Whether this is just only co2 emmissions or something else we will have to observe. Poltics wise i am keeping to the 'local' SAG race for 2008 - Washington State voters can probably do better than what they have now.

10 April: Gardening - usual suspects again (spam not seo)on quick glance and compare. Opsan's blog appears down here for posting to.

5 April: Minding ones business comrade Ed hints me about somthing called theemailadvertisingcompany.com. which is a brand new domain name and not something old and dealt with before.

This registrar used here before in 23/11/2006 might also be of interest to Soloway watchers

[grs.hichina.com]
Domain Name ..................... theemailadvertisingcompany.com
Name Server ..................... dns13.hichina.com
                                  dns14.hichina.com
Registrant ID ................... hc380703102-cn
Registrant Name ................. ff ff
Registrant Organization ......... fff
Registrant Address .............. shanxi
Registrant City ................. shanxi
Registrant Province/State ....... shanxi
Registrant Postal Code .......... 100000
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.0101000000 - 
Registrant Fax .................. +86.100000000000 - 
Registrant Email ................ leohosting@hotmail.com
Administrative ID ............... hc880703102-cn
Administrative Name .............  DaGang
Administrative Organization ..... 
Administrative Address .......... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Administrative City ............. Beijing
Administrative Province/State ... Beijing
Administrative Postal Code ...... 100085
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.01062969470 - 
Administrative Fax .............. +86.01062969470 - 
Administrative Email ............ postmaster@2ndDNS.com
Billing ID ...................... hc367443358-cn
Billing Name ....................  DaGang
Billing Organization ............ 
Billing Address ................. No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100085
Billing Country Code ............ CN
Billing Phone Number ............ +86.01062969470 - 
Billing Fax ..................... +86.01062969470 - 
Billing Email ................... postmaster@2ndDNS.com
Technical ID .................... hc680703102-cn
Technical Name ..................  DaGang
Technical Organization .......... 
Technical Address ............... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100085
Technical Country Code .......... CN
Technical Phone Number .......... +86.01062969470 - 
Technical Fax ................... +86.01062969470 - 
Technical Email ................. postmaster@2ndDNS.com
Expiration Date ................. 2008-02-27 10:13:25

http://2nddns.com/ is a very Chinese affair - they appear to the registrar/reseller for hichina.com I might be 100% wrong there. This is interesting

dig www.theemailadvertisingcompany.com

; <<>> DiG 9.3.4 <<>> www.theemailadvertisingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40207
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;www.theemailadvertisingcompany.com. IN A

;; ANSWER SECTION:
www.theemailadvertisingcompany.com. 3600 IN CNAME catalyst3550.meibu.com.
catalyst3550.meibu.com. 20      IN      A       58.17.245.130

;; AUTHORITY SECTION:
meibu.com.              43020   IN      NS      ns3.meibu.com.
meibu.com.              43020   IN      NS      ns2.meibu.com.

;; Query time: 1389 msec
;; SERVER: boris
;; WHEN: Fri Apr  6 19:24:59 2007
;; MSG SIZE  rcvd: 137

if your awake and not bored yet meibu.com was last seen in 01/11/2005 I note. Its China 'paging the pandas'

whois 58.17.245.130
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      58.17.128.0 - 58.17.255.255
netname:      CNCGROUP-CQ
descr:        CNC Group Chongqing province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-CQ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20050215
changed:      hm-changed@apnic.net 20050218
source:       APNIC

route:        58.17.128.0/17
descr:        CNC Group CHINA169 Chongqing Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

I will update the map later on, gardening tuesday

2 April: Gardening time, so one two three and shovels at dawn.

Just the spam stuff today. somebody else can do the seo domains if the feel like it. No major changes - all ip's listed have been seen here previously, the order that there shown is somthing i have not checked since we last went gardening.

 dig EMAILBROADCASTAUTHORITY.COM

; <<>> DiG 9.3.4 <<>> EMAILBROADCASTAUTHORITY.COM
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2399
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;EMAILBROADCASTAUTHORITY.COM.   IN      A

;; ANSWER SECTION:
EMAILBROADCASTAUTHORITY.COM. 3600 IN    A       218.106.165.212 [china * seen before]

;; AUTHORITY SECTION:
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns4.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns1.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns2.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns3.EMAILBROADCASTAUTHORITY.COM.

;; Query time: 6396 msec
;; SERVER: boris
;; WHEN: Mon Apr  2 11:30:51 2007

ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     202.92.63.166   [bangladesh * seen before]
ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.106.165.183 [china * seen before]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     210.76.106.82   [china * seen before]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.60   [china * seen before]

Less dns clarity from

 

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [china * seen before]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [china * seen before]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [china * seen before]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166  [bangladesh * seen before]

? bad dns skills ? - somebody mentioned in opsan an rfc 1918 setup (local - non routable ranges of ip addresses, it would appear that this is not a spambot controller

dig emailsolutioncorp.com

; <<>> DiG 9.3.4 <<>> emailsolutioncorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29674
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailsolutioncorp.com.         IN      A

;; ANSWER SECTION:
emailsolutioncorp.com.  3600    IN      A       210.76.106.82   [china * seen before (www) server]

;; AUTHORITY SECTION:
ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183 [china * seen before]
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82   [china * seen before]
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60   [china * seen before]
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166   [bangladesh * seen before]

;; Query time: 1355 msec
;; SERVER: boris
;; WHEN: Mon Apr  2 11:35:40 2007
;; MSG SIZE  rcvd: 127

One more

dig emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3604
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

;; ANSWER SECTION:
emailmarketingassociates.com. 3600 IN   A       218.106.165.212 [china * seen before]

;; AUTHORITY SECTION:
emailmarketingassociates.com. 1293 IN   NS      ns1.prioritydns.info.

;; ADDITIONAL SECTION:
ns1.prioritydns.info.   881     IN      A       218.106.165.183 [china *seen before]

;; Query time: 1401 msec
;; SERVER: boris_the_bear
;; WHEN: Mon Apr  2 11:37:06 2007
;; MSG SIZE  rcvd: 112

admin: I do like this mapping nonsense - I've added a link in the the main menu i use for this page, other features on map 3 now include Robert's old haunts, and isp. Map 4 needs some more spamcop reports, but south america is looking good recently.

28 March: Sky over at Opsan reports a new domain imaginatively named 'emailmarketingassociates.com'. Registered to our friend in China named Liu. Usual garbage starts below.

 whois emailmarketingassociates.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailmarketingassociates.com
  Creation Date........ 2006-11-17 21:43:12
  Registration Date.... 2006-11-17 21:43:12
  Expiry Date.......... 2007-11-17 21:43:12
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailmarketingassociates.com
  Name Server.......... ns3.emailmarketingassociates.com
  Name Server.......... ns2.emailmarketingassociates.com
  Name Server.......... ns1.emailmarketingassociates.com

dig emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24514
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

;; ANSWER SECTION:
emailmarketingassociates.com. 3600 IN   A       218.106.165.212

;; AUTHORITY SECTION:
emailmarketingassociates.com. 42698 IN  NS      ns3.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns4.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns1.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns2.emailmarketingassociates.com.

;; ADDITIONAL SECTION:
ns1.emailmarketingassociates.com. 9687 IN A     218.106.165.183 [cn * seen before]
ns2.emailmarketingassociates.com. 924 IN A      210.76.106.82 [cn * seen before]
ns3.emailmarketingassociates.com. 924 IN A      221.194.44.60 [cn * seen before]
ns4.emailmarketingassociates.com. 924 IN A      202.92.63.166 [bd * seen before]

;; Query time: 968 msec
;; SERVER: boris
;; WHEN: Tue Mar 27 12:20:52 2007
;; MSG SIZE  rcvd: 198

Locations: www- 218.106.165.212 (china), dns 75% china 25% Bangladesh. - i thus procliam Bangladesh to be a spam sewer. I also note some subtle change to the website - millions of us are not.

Anyhow spamcop reports most welcome. - maps have been updated thank you, more reports always welcome.

27 March: Admin note: before i bore you all to death with the 'where' theres been some nastiness in the world of 'counting' should any outside link (not that use i them much) might add spyware etc, and if you think it was inserted via here please do let me know. As per my defaults most links on this page link to stuff we provide. But do let me know and we will rethink the approach.

Now wheres that dog gone....

ns1.emailsolutioncorp.com. 38746 IN     A       218.106.165.183 [cn was 207]
ns2.emailsolutioncorp.com. 38746 IN     A       210.76.106.82   [cn china govt was 241]
ns3.emailsolutioncorp.com. 38746 IN     A       221.194.44.60   [cn - no change]
ns4.emailsolutioncorp.com. 38746 IN     A       202.92.63.166   [bd - no change]

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66   [cn - no change]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60   [cn - no change]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241  [cn - no change]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166   [bd - no change]

ns1.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     218.57.8.93     [cn - no change]
ns2.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     221.194.44.62   [cn - no change]
ns3.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     222.76.212.175  [cn - no change]
ns4.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     208.2.150.150   [usa - no change medecison]

;; Query time: 1522 msec
;; SERVER: boris
;; WHEN: Mon Mar 26 17:57:01 2007

No change in the world of seo to report either and usual suspects. Interestingly now playing whack a mole is ns2.emailsolutioncorp.com and our friends in the chinese government aka 'Beijing Software Industry Productivity Center' and fuy@bsw.gov.cn So china gets a gold spam with 9/12 dns spots, silver goes to Bangladesh with 2/12, and usa fails miserably with bronze with 1/12 so no gold medals for america.

That concludes the gardening.

22 March: Latest map map3e Robert Soloway Map (version 5). should be for your consideration. It features two maps on a page, however something better would be desirable - this was achieved with a bit of searching and no book help.

Your spamcop reports are most welcome, your spamcop report (with the spamming ip) could be added to the map.

help: If there be any googlemap experts willing to drop a hint - please drop me a note. I need to visit a library before I can progress further with maps.

news wise: In Opsan robert is compared to failed marriage partner in reference to his telephone manner a Florist observes. Thank you to Green Cottage for that observation.

plans: Speaking of gardens - I plan to do some gardening soon - have you seen my spade ?.

17 March: Have a go with http://sjwest01.googlepages.com/map3.html Robert Soloway Map very very very beta. Thank you for the spamcop reports. SEO Section moved up the document a little it annoyed us where it was.

New! - http://sjwest01.googlepages.com/map4.html Robert Soloway Spambot Map (also very beta).

15 March: Dns update - (yawn) Medecision make another appearance hmmmm.

ns1.emailsolutioncorp.com. 9245 IN      A       218.106.165.207 [cn]
ns2.emailsolutioncorp.com. 9245 IN      A       210.76.106.241 [cn]
ns3.emailsolutioncorp.com. 9245 IN      A       221.194.44.60 [cn]
ns4.emailsolutioncorp.com. 9245 IN      A       202.92.63.166 [bd]

ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93 [cn]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62 [cn]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 [cn]
ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150 [Medecison, usa]

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66 [cn]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60 [cn]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166 [bd]

;; SERVER: boris
;; WHEN: Thu Mar 15 17:20:58 2007
;; MSG SIZE  rcvd: 191

admin note: Strangley i find out this page is Great Firewall of China 'friendly'.

14 March: Thank you for the spamcop reports. We need better roach killer, some might say thats very christian that. Anyhow the two domains who lost there 'where' have returned.

Before i bore you all to death Our chinese government friends make yet anoher appearance (you see China does loves spam) and we all take a holiday to Bangladesh which is a new destination for us, its another stamp in the passport folks.

whois 202.92.63.166
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      202.92.48.0 - 202.92.63.255
netname:      AIRNET
descr:        Dekko Airnet Ltd.
descr:        Internet Service Provider
descr:        Dhaka
descr:        Bangladesh
country:      BD
admin-c:      FR17-AP
tech-c:       FR17-AP
changed:      hm-changed@apnic.net 20030121
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-BD-DEKKO-AIRNET
source:       APNIC

person:       Faisal Rahman
nic-hdl:      FR17-AP
e-mail:       faisal@danl.com.bd
address:      Dekko Airnet Ltd.
address:      13 Kawran Bazar
address:      T.K. Bhaban (17th Floor)
address:      Dhaka 1215
phone:        +880 2 9110296
fax-no:       +880 2 8123608
country:      BD
changed:      faisal@danl.com.bd 20040320
mnt-by:       MAINT-BD-DEKKO-AIRNET
source:       APNIC

One meets many 'old friends' while doing this page. Boring stuff follows sorry.

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [cn]
;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [cn]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn - Beijing Software Industry Productivity Center]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166 [Dhaka, Bangladesh, BD]

ns1.emailsolutioncorp.com. 10794 IN     A       124.254.44.66  as above
ns2.emailsolutioncorp.com. 10794 IN     A       221.194.44.60
ns3.emailsolutioncorp.com. 10794 IN     A       210.76.106.241 [cn - Beijing Software Industry Productivity Center]
ns4.emailsolutioncorp.com. 10794 IN     A       202.92.63.166

;; Query time: ???
;; SERVER: boris
;; WHEN: Tue Mar 13 15:15:40 2007

13 March: Sky in opsan thinks Roberts been a dns botneting again - this time on roach runner (rr.com). So it's time to do some gardening again one, two, three spades at the ready and go.

We have a new dns supplier meet strawberyaudk.org and somebody called Aquil A. Naeem, 110 Arrowcreek Drive, 28273, Charlotte, North Carolina USA. Geeky people will also notice the change in in Gandi lookup.

whois strawberyaudk.org -hwhois.gandi.net
[Querying whois.gandi.net]
[whois.gandi.net]
% GANDI Registrar whois database for .COM, .NET, .ORG., .INFO, .BIZ, .NAME
% Acces et utilisation soumis a la legislation francaise sur
% les donnees personnelles.
% yada yada ye....
% Date: 2007/03/12 12:38:01
domain:         strawberyaudk.org
owner-address:  2110 Arrowcreek Drive #303
owner-address:  28273
owner-address:  Charlotte
owner-address:  North Carolina
owner-address:  United States of America
admin-c:        AAN19-GANDI
tech-c:         AAN19-GANDI
bill-c:         AAN19-GANDI
nserver:        ns1.strawberyaudk.org 217.70.185.0
nserver:        ns2.strawberyaudk.org 217.70.185.0
nserver:        ns5.strawberyaudk.org 217.70.185.0
nserver:        ns3.strawberyaudk.org 217.70.185.0
nserver:        ns4.strawberyaudk.org 217.70.185.0
reg_created:    2007-02-28 20:26:37
expires:        2008-02-28 20:26:37
created:        2007-02-28 21:25:05
changed:        2007-03-12 11:52:34

person:         Aquil A. Naeem
nic-hdl:        AAN19-GANDI
address:        2110 Arrowcreek Drive #303
address:        28273
address:        Charlotte
address:        North Carolina
address:        United States of America
phone:          +1.4406102907
e-mail:         6cc3e844b11b50948e6aab86be40905d-aan19@contact.gandi.net
lastupdated:    2007-02-28 21:23:07

Summarising the below changes be (withdrawals) that our Chinese government friends at 210.76.96.0 - 210.76.115.255, (Beijing Software Industry Productivity Center) dont like Bob it appears - surprising that.

Additions now: Medecision make a reapperance from 25 Feb 2007 They do seem to be a bit clueless. Lots of usa dsl boxes here, of note (and close to Robert home?) is Charter Communications KNWK-WA, usa on 68.189.136.87 (see below).

Of more interest: Australia makes an appearance via unwiredaustralia.com.au which would appear to be a dsl supplier too. Most importantly is new Chinese dns provider by the name of XIAMEN-TELECOM-IDC-XIAMEN-FJ

whois 222.76.212.175
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      222.76.208.0 - 222.76.223.255
netname:      XIAMEN-TELECOM-IDC-XIAMEN-FJ
country:      CN
descr:        Xiamen Telecom IDC
descr:        Xiamen Fujia Province
admin-c:      CA67-AP
tech-c:       CA67-AP
changed:      fjnic@fjdcb.fz.fj.cn 20040719
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CHINANET-FJ
source:       APNIC

role:         CHINANETFJ IP ADMIN
address:      7,East Street,Fuzhou,Fujian,PRC
country:      CN
phone:        +86-591-3333169-293
fax-no:       +86-591-3371954
e-mail:       fjnic@fjdcb.fz.fj.cn
trouble:      send spam reports  and abuse reports
trouble:      to abuse@fjdcb.fz.fj.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      FH71-AP
tech-c:       FH71-AP
nic-hdl:      CA67-AP
mnt-by:       MAINT-CHINANET-FJ
changed:      fjnic@fjdcb.fz.fj.cn 20020719
source:       APNIC

Boring stuff now sorry.

ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93    [cn]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62  [cn]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 [cn - ?new?]
ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150  [medecison, usa]

ns1.permissionemailcorp.com. 180 IN     A       24.126.126.177 [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       67.166.181.124 [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       69.47.53.127   [WideOpenWest, il,usa]
ns1.permissionemailcorp.com. 180 IN     A       24.6.233.172   [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       24.125.160.190 [comcast usa]
;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns4.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns1.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns2.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns3.strawberyaudk.org.

emailsolutioncorp.com.  180     IN      A       24.23.125.215  [comcast, usa]
emailsolutioncorp.com.  180     IN      A       67.9.165.164   [rr.com, usa]
emailsolutioncorp.com.  180     IN      A       67.10.13.218   [rr.com, usa]
emailsolutioncorp.com.  180     IN      A       68.189.136.87  [Charter Communications KNWK-WA, usa]
emailsolutioncorp.com.  180     IN      A       125.63.139.70  [unwiredaustralia. com.au]
;; AUTHORITY SECTION:
emailsolutioncorp.com.  28387   IN      NS      ns2.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns3.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns4.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns1.strawberyaudk.org.

;; Query time: 2740 msec
;; SERVER: boris
;; WHEN: Mon Mar 12 11:24:09 2007
;; MSG SIZE  rcvd: 272

Sky was right. - I imagine websites point to China as usual via these proxies. Update: only one domain seems to work, Robert has broken his internet thingy again. - up host is

ns1.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     218.57.8.93
ns2.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     221.194.44.62
ns3.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     222.76.212.175
ns4.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     208.2.150.150

Most of those point east to that red book waving country, whose name aludes me. Imagine breaking the internet on a monday morning. Anyhow more fun and gardening (come smell the roses) soon.

Admin: Have had a little 'fun' with the Bob screen dumps - all are now clickable and printable (provided you can handle png) without right clicking.

10 March: Friend cc's us a bob craplet, other news I am using this on the right hand menu. Which might be usefull/useless, the right hand menu is never printed out of you use our print css file. This sort of function usually strikes me as pointless until recently, Views welcome.

9 March: With the recent link to smd (spam of mass destruction) in this page I can widen my focus a little but still keeping to my objective as mostly remaining a Robert Soloway spam document.

The US SEC (stock exchange) have decided to block trading in spams promoting stock trading. A quote i think.

He said the SEC is investigating the companies themselves as well as outsiders, and that the same people are likely behind multiple spam campaigns. The suspensions will last for 10 days. The S.E.C. said that further investigation could lead to arrests.

Recent offenders fingered by the us sec and have had there trading stopped included.

Quite what this means for Robert is something we can all speculate about. What the SEC thinks about can-spam legislation is pretty clear. I hope that this action by the sec continues. If it does not then its value as a statement only about 'can-spam' effectiveness was worth a mention here.

8 March: Sky confirms and informs us via opsan that the comrades in Chinas government are aware there hosting Robert Soloway in several forms, quite how 'anti spam' that makes them is something you can all think about.

7 March: Thank you for the spamcop reports, more always welcome. I will be doing some Robert Soloway 'gardening' soon when the time makes itself free.

Seo domains first, submit-me-now.com no change with dns services supplied by China Telecom, and Beijing Feihua Communication Technology Co.Ltd. and hosted in China at Beijing Guanghuan Xinwang Digital Technology co.Ltd

nim-company.com (other seo) also shows no changes in status with its american hosting as before.

spam domains now, we have a mix of Korea and China here

EMAILBROADCASTAUTHORITY.COM - NS2.EMAILBROADCASTAUTHORITY.COM changes from 211.155.132.228 to

ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62

Thats China (still) CNCGROUP Hebei Province Network, no other changes. to emailbroadcastauthority.com. Next one strikes me a mildly humourous new hoster in guess ... China.

dig permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43079
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       210.76.106.241

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.

;; Query time: 431 msec
;; SERVER: boris
;; WHEN: Wed Mar  7 16:45:44 2007
;; MSG SIZE  rcvd: 129

Meet Beijing Software Industry Productivity Center on 210.76.106.241 (you will be seeing a lot of them) is this the Chinese Government/peoples liberation army (pla) ?

whois 210.76.106.241
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      210.76.96.0 - 210.76.115.255
netname:      BESTINFONET
country:      CN
descr:        Beijing Software Industry Productivity Center
descr:        F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
admin-c:      YF124-AP
tech-c:       YF124-AP
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CNNIC-AP
changed:      dongyan@cnnic.cn 20040906
changed:      hm-changed@apnic.net 20040927
source:       APNIC

person:       Yi Fu
nic-hdl:      YF124-AP
e-mail:       fuy@bsw.gov.cn
address:      F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
phone:        +86-010-82331717-863
fax-no:       +86-010-82332323
country:      CN
changed:      dongyan@cnnic.cn 20040906
mnt-by:       MAINT-NEW
source:       APNIC

inetnum:      210.76.96.0 - 210.76.115.255
netname:      BESTINFONET
country:      CN
descr:        Beijing Software Industry Productivity Center
descr:        F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
admin-c:      YF124-CN
tech-c:       YF124-CN
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CNNIC-AP
changed:      dongyan@cnnic.cn 20040906
changed:      hm-changed@apnic.net 20040927
source:       CNNIC

person:       Yi Fu
nic-hdl:      YF124-CN
e-mail:       fuy@bsw.gov.cn
address:      F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
phone:        +86-010-82331717-863
fax-no:       +86-010-82332323
country:      CN
changed:      dongyan@cnnic.cn 20040906
mnt-by:       MAINT-NEW
source:       CNNIC

Dns points to

ns4.permissionemailcorp.com. 3600 IN    A       210.76.106.241
ns3.permissionemailcorp.com. 43200 IN   A       222.122.56.49 * korea
ns2.permissionemailcorp.com. 3600 IN    A       210.76.106.241
ns1.permissionemailcorp.com. 43144 IN   A       218.57.8.93

In China - CNCGROUP-SD, Beijing Software Industry Productivity Center x 2

And finally .... emailsolutioncorp.com... (never forgotten)

emailsolutioncorp.com.  3600    IN      A       210.76.106.241
ns4.emailsolutioncorp.com. 6171 IN      A       88.146.0.57 * czech - eu
ns1.emailsolutioncorp.com. 6171 IN      A       218.57.8.93
ns2.emailsolutioncorp.com. 6171 IN      A       210.76.106.241
ns3.emailsolutioncorp.com. 6171 IN      A       222.122.56.49 * korea

In China - CNCGROUP-SD, and Beijing Software Industry Productivity Center x2 (see above), plus our czech friends from last time, and Korea. Gardening time is finished for now.

6 March: admin note: Well George and Tony have wmd so Bananas must have 'smd' theories. Thats spam of mass destruction.

5 March: globustravelclub.info will be added to the domain list after looking at this (google) and Ed finds a link to aristocratroyal.info also a Google link which links it to drug sales of spam type that we all love.

Thank you also for the recent spamcop reports. Its very nice to have an original of the Robert mess up noted below.

3 March: Ed over at Opsan spots some Robert confusion. Now if this does not say something to shady then I'm a teapot called George. Excerpt from Roberts spam (I have copies of spamcop.net) for authenticity*.

Check out this new website i have found:

http://www.globustravelclub.info

everything you needed in one place.
we email advertise your charity web site to 7,500,000 people. free.

http://www.emailsolutioncorp.com 

Two in one email that is deserving of a lookup i think...

whois globustravelclub.info
[Querying whois.afilias.info]
[whois.afilias.info]
Yada yada ye 

Domain ID:D16446387-LRMS
Domain Name:GLOBUSTRAVELCLUB.INFO
Created On:09-Feb-2007 20:00:33 UTC
Last Updated On:20-Feb-2007 20:17:54 UTC
Expiration Date:09-Feb-2008 20:00:33 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:F4BA58C1E307310F
Registrant Name:Sierra Prine
Registrant Organization:
Registrant Street1:1080 Lake Front Dr Apt 718
Registrant Street2:
Registrant Street3:
Registrant City:Sacramento
Registrant State/Province:CA
Registrant Postal Code:95831
Registrant Country:US
Registrant Phone:+1.9164287480
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: greitsai@yahoo.com
Admin ID:F4BA58C1E307310F
Admin Name:Sierra Prine
Admin Organization:
Admin Street1:1080 Lake Front Dr Apt 718
Admin Street2:
Admin Street3:
Admin City:Sacramento
Admin State/Province:CA
Admin Postal Code:95831
Admin Country:US
Admin Phone:+1.9164287480
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:greitsai@yahoo.com
Billing ID:F4BA58C1E307310F
Billing Name:Sierra Prine
Billing Organization:
Billing Street1:1080 Lake Front Dr Apt 718
Billing Street2:
Billing Street3:
Billing City:Sacramento
Billing State/Province:CA
Billing Postal Code:95831
Billing Country:US
Billing Phone:+1.9164287480
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:greitsai@yahoo.com
Tech ID:F4BA58C1E307310F
Tech Name:Sierra Prine
Tech Organization:
Tech Street1:1080 Lake Front Dr Apt 718
Tech Street2:
Tech Street3:
Tech City:Sacramento
Tech State/Province:CA
Tech Postal Code:95831
Tech Country:US
Tech Phone:+1.9164287480
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:greitsai@yahoo.com
Name Server:NS1.RABBITANDTIGER.NET
Name Server:NS2.RABBITANDTIGER.NET
Name Server:NS3.RABBITANDTIGER.NET
Name Server:NS4.RABBITANDTIGER.NET
Name Server:NS5.RABBITANDTIGER.NET

admin note: We now have a working local html validator, and this should mean one update, rather than several where i fixed stupid stuff with euro; signs, etc. So an update is an update, rather than a html check.

Also we are attempting our yearly spell check

*An authentic Robert Soloway spam ? and not a fake does appear to have a level of comic value here to my brain.

27 February: Getting bored ? - falling asleep while ploughing through the last of the recent date entries - well so was I. Anyhow how Robert lightens the tones with a new domain, so fire up that J S Bach music in your telephone system as we introduce a new Robert Soloway domain of... emailsolutioncorp.com.

whois -hwhois.dns.com.cn emailsolutioncorp.com
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailsolutioncorp.com
  Creation Date........ 2006-11-17 21:43:07
  Registration Date.... 2006-11-17 21:43:07
  Expiry Date.......... 2007-11-17 21:43:07
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailsolutioncorp.com
  Name Server.......... ns3.emailsolutioncorp.com
  Name Server.......... ns2.emailsolutioncorp.com
  Name Server.......... ns1.emailsolutioncorp.com

OK good old liu feng and guang zhou there, for domain look up spade the nameserver not the domain name

--- resolving host "ns1.emailsolutioncorp.com", please wait...
ns1.emailsolutioncorp.com [218.57.8.93]
--- 02/27/07 00:43:53 GMT Standard Time
--- resolving host "ns2.emailsolutioncorp.com", please wait...
ns2.emailsolutioncorp.com [221.194.44.60]
(ns1.prioritydns.info [221.194.44.60] )
--- 02/27/07 00:43:58 GMT Standard Time
--- resolving host "ns3.emailsolutioncorp.com", please wait...
ns3.emailsolutioncorp.com [222.122.56.49]
--- 02/27/07 00:44:04 GMT Standard Time
--- resolving host "ns4.emailsolutioncorp.com", please wait...
ns4.emailsolutioncorp.com [88.146.0.57]

Servers (dns) listed as

[218.57.8.93] - China
[221.194.44.60] - China
[222.122.56.49] - South Korea - Please Kim Jong-il nuke kornet and South Korea please please
[88.146.0.57] - Our czech friends again (eu)

Funny (humour) from opsan now from Comrade 'Flood the Spambox' whose activities to unsubscribe spam, and try and purchase his spam package (via non ssl) finally got a response. I love Roberts odd logic and lack of understanding of jurisdiction. Standard pure bull shit.

I'm sure the owner of robmckenna.org which not like to get Roberts Soloways Spam - I do hope some nice republican supporter will visit Mr Soloways website and unsubscribe that domain - after can-spam sorted out the spam problem didn't it.

Thank you for the spamcop reports.

26 February: admin note: have added link at the top of this document to cover the 2008 elections. Any help with links and comments by made by the SAG quoted in the press most welcome. After all it is an election year.

Thank you for the spam cop reports, Spamhaus have assigned sbl's to Czech isps (see couple of days ago entry) for details

Sky reports Robert is Havesting email from domains again over at Opsan.

A message to me (smoke signals) informs me that 221.194.44.61 (China) reportedly has port 3389 open - which apparently has a terminal service on a windows box. This box also hosts Roberts spamming websites of EMAILBROADCASTAUTHORITY.COM and permissionemailcorp.com which I referred to here on the 23/02/2007.

This seems to fits Robert windows platform preference observered here before in this page.

Should you wish to have fun do please take care, Robert has yet another 'fan'. Thank you for your tip (unverified).

25 February:Whois 'MEDecision' ? which was the name in look from yesterday - apparently

MEDecision provides software, services and clinical content that allows for increased administrative efficiency and improved quality

url:medecision.com
Nasdaq symbol: MEDE
Address: MEDecision Corporate Headquarters, 601 Lee Road, Chesterbrook Corporate Center, Wayne, PA, US,19087
phone: 610-540-0202

DNS to range indicates a breaking via sprint rather than a hack to MEDecisions webhoster (Qwest). Quite why Medecison need a another range i leave for them to explain. Websites hosted on Qwest

whois 72.165.244.1
[Querying whois.arin.net]
[whois.arin.net]
Qwest Communications Corporation QWEST-INET-37 (NET-72-164-0-0-1) 
                                  72.164.0.0 - 72.166.255.255
Medecision, Inc. Q0427-72-165-244-0 (NET-72-165-244-0-1) 
                                  72.165.244.0 - 72.165.244.255

Internal range of Medecision, Inc (range below has Robert Soloway dns server - see yesterdays entry) appears to be:

 whois 208.2.150.150
[Querying whois.arin.net]
[whois.arin.net]
Sprint SPRINTLINK-BLKS (NET-208-0-0-0-1) 
                                  208.0.0.0 - 208.35.255.255
Medecision, Inc. SPRINTLINK (NET-208-2-150-0-1) 
                                  208.2.150.0 - 208.2.150.255

Interesting - I'd like to hear an explanation anyhow.

24 February: Boring entry today - sorry but permissionemailcorp.com dns changes from

ns1.permissionemailcorp.com. 30127 IN   A       218.57.8.93 #
ns3.permissionemailcorp.com. 30127 IN   A       222.122.56.49 #
ns4.permissionemailcorp.com. 8831  IN   A       88.146.0.57 €

to

ns1.permissionemailcorp.com. 24967 IN   A       218.57.8.93 #
ns2.permissionemailcorp.com. 24967 IN   A       221.194.44.62 #
ns3.permissionemailcorp.com. 24967 IN   A       222.122.56.49 # *
ns4.permissionemailcorp.com. 24967 IN   A       88.146.0.57 €**

Lets do the other shall - why not i hear from those of you whom be awake.

ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150 USA
ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93 #
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62 #
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 #

key:
# China,
€ Czech (eu)
* new china
- ** see yesterday,
USA america
New spambot setup in progress ? A look up of 222.122.56.49 follows

whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

The other dns of note - america.

 whois 208.2.150.150
[Querying whois.arin.net]
[whois.arin.net]
Sprint SPRINTLINK-BLKS (NET-208-0-0-0-1) 
                                  208.0.0.0 - 208.35.255.255
Medecision, Inc. SPRINTLINK (NET-208-2-150-0-1) 
                                  208.2.150.0 - 208.2.150.255

23 February: spam update for EMAILBROADCASTAUTHORITY.COM and permissionemailcorp.com both point to 221.194.44.61 Go Chinese Pandas!

dig permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; -<<HEADER<<- opcode: QUERY, status: NOERROR, id: 11737
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.61

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; Query time: 2867 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:07:31 2007
;; MSG SIZE  rcvd: 129

dig EMAILBROADCASTAUTHORITY.COM

; <<>> DiG 9.3.4 <<>> EMAILBROADCASTAUTHORITY.COM
;; global options:  printcmd
;; Got answer:
;; -<<HEADER<<- opcode: QUERY, status: NOERROR, id: 54442
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;EMAILBROADCASTAUTHORITY.COM.   IN      A

;; ANSWER SECTION:
EMAILBROADCASTAUTHORITY.COM. 3600 IN    A       221.194.44.61

;; AUTHORITY SECTION:
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns1.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns2.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns3.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns4.EMAILBROADCASTAUTHORITY.COM.

;; Query time: 3121 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:08:13 2007
;; MSG SIZE  rcvd: 133

whois 221.194.44.61
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

SEO operations now of submit-me-now.com (seo spam op) and nim-company.com

dig submit-me-now.com

; <<>> DiG 9.3.4 <<>> submit-me-now.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55013
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4

;; QUESTION SECTION:
;submit-me-now.com.             IN      A

;; ANSWER SECTION:
submit-me-now.com.      3600    IN      A       124.42.8.146

;; AUTHORITY SECTION:
submit-me-now.com.      3600    IN      NS      ns1.dns.com.cn.
submit-me-now.com.      3600    IN      NS      ns2.dns.com.cn.

;; ADDITIONAL SECTION:
ns1.dns.com.cn.         2772    IN      A       218.30.114.205
ns1.dns.com.cn.         2772    IN      A       218.30.114.204
ns2.dns.com.cn.         286     IN      A       218.244.47.6
ns2.dns.com.cn.         286     IN      A       218.244.47.5

;; Query time: 3282 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:17:32 2007
;; MSG SIZE  rcvd: 161

[sjwest@mail2 ~]$ whois 124.42.8.146
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-AP
tech-c:       WH271-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
changed:      hm-changed@apnic.net 20060109
source:       APNIC

person:       Chen hao
nic-hdl:      CH471-AP
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Wang Huijun
nic-hdl:      WH271-AP
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-CN
tech-c:       WH271-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MANT-CN-SINNET
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20060112
source:       CNNIC

person:       Chen hao
nic-hdl:      CH471-CN
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20030328
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Wang Huijun
nic-hdl:      WH271-CN
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20060313
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

not forgetting ... nim-company.com being servered in spammy florida still.

No spambots from gandi (France) i notice, Thank you for the spamcop reports dns in Czech (eu) - probably hijacked.

ns4.permissionemailcorp.com [88.146.0.57] 
inetnum:        88.146.0.0 - 88.146.0.255
netname:        ADSLCOLNETWORK2
descr:          ADSL POP
descr:          Czech On Line a.s.
country:        CZ
admin-c:        VOL-RIPE
tech-c:         VOL-RIPE
status:         ASSIGNED PA
mnt-by:         VIDEOONLINE-MNT
mnt-lower:      VIDEOONLINE-MNT
source:         RIPE # Filtered
 
role:           Video On Line Hostmaster Role
address:        Czech On Line a.s.
address:        U Nakladoveho nadrazi 8
address:        130 00, Prague 3
phone:          +420 246000222
phone:          +420 246000400
fax-no:         +420 246000113
remarks:        trouble:      
------------------------------------------
remarks:        trouble:      Operational issues: hostmaster@vol.cz
remarks:        trouble:      Abuse and SPAM:     abuse@vol.cz

update (26/2/2007) Spamhaus add this for the above range and host ost1-v-5-57.static.adsl.vol.cz - at time of writing 6 open tickets for this isp listed here (vol.cz) sbl's

21 February: An anon contact (verified) says Santa Monica California is apparently his original roots - happy digging, and thank you very much

Elections for 2008 - Washington State (WA) not DC (politics1.com) is covering the state - Incumbent State Attorney General appears to be running again Rob McKenna (campaign site) is running, whom i discover is a republican by nature - ?spam is good?

lets go do a whois shall we ?

Domain ID:D25135944-LROR
Domain Name:ROBMCKENNA.ORG
Created On:18-Apr-2000 03:03:37 UTC
Last Updated On:17-Oct-2006 18:07:27 UTC
Expiration Date:18-Apr-2009 03:03:37 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:tuH8oQWrYdeDUm5R
Registrant Name:Rob McKenna
Registrant Organization:Committee to Re-Elect Attorney General Rob McKenna
Registrant Street1:6021 - 118th Avenue SE
Registrant Street2:
Registrant Street3:
Registrant City:Bellevue
Registrant State/Province:WA
Registrant Postal Code:98507
Registrant Country:US
Registrant Phone:+1.4256206337
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:robmckenna@robmckenna.org
Admin ID:tumOyn2iq2eavsIL
Admin Name:Craig Wright
Admin Organization:Committee to Re-Elect Attorney General Rob McKenna
Admin Street1:9039 SE 59th Street
Admin Street2:
Admin Street3:
Admin City:Mercer Island
Admin State/Province:WA
Admin Postal Code:98040
Admin Country:US
Admin Phone:+1.2063902978
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:cbwright@speakeasy.net
Tech ID:tupS4IVNiIChwDfZ
Tech Name:Support Easy CGI
Tech Organization:Easy CGI
Tech Street1:99 Main Street
Tech Street2:
Tech Street3:
Tech City:Nyack
Tech State/Province:NY
Tech Postal Code:10960
Tech Country:US
Tech Phone:+1.8453487698
Tech Phone Ext.:
Tech FAX:+1.8457277777
Tech FAX Ext.:
Tech Email:support@easycgi.com
Name Server:NS1.EASY-CGI.COM
Name Server:NS2.EASY-CGI.COM

Oddly Mr McKennas campaign site is based in New York State phobos.easy-cgi.com (66.245.186.32) Easy CGI, Inc.,EASYCG, 99 Main Street,Nyack,NY,10960 US - there must be something wrong with WA webhosters I assume ?

Consider that a Bananas in the Falklands exclusive.

19 February: General page cleanup (its a bit of a monster to maintain). Recent dns terminations of dns moved from yellow to red colour in domain table. Added the other seo domain name to the 'up host' table too.

admin: Since we are buying hats (a metaphor) recently I do hope that that our friends will perform on the day of the dance. Since my hats getting quite full can anybody recommend a decent big hat because mine is getting quite full.

Anyhow despite a perceived hat problem, i look forward to the dance and i trust someone will send me a 'ticket'.

14 February: Ed writes me that a NANEA post that gandi (the french) trashed MOUSESTYLEE.NET, Beergoggles reports to that phone number does not reach 'George Jones'. So its Chinese dns (very anti spam) again for Robert.

dig permissionemailcorp.com

; >><< DiG 9.3.4 >><< permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37539
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 3

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.61

;; AUTHORITY SECTION:
permissionemailcorp.com. 43199  IN      NS   ns4.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns1.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns2.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns3.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns1.permissionemailcorp.com. 30127 IN   A       218.57.8.93
ns3.permissionemailcorp.com. 30127 IN   A       222.122.56.49
ns4.permissionemailcorp.com. 8831  IN   A       88.146.0.57

;; Query time: 437 msec
;; SERVER: boris
;; WHEN: Wed Feb 14 22:33:22 2007
;; MSG SIZE  rcvd: 177

name servers locate to 88.146.0.57 = eastern europe,
222.122.56.49 = south korea (kim nukem please!)
218.57.8.93 = China (both CNCGROUP-HE and CNCGROUP-SD).

12 February: Ed writes me that a NANEA post that we have a new dns bot MOUSESTYLEE.NET for permissionemailcorp.com - a short look up

 whois permissionemailcorp.com 
[Querying whois.verisign-grs.com] [whois.verisign-grs.com]

Whois Server Version 2.0

   Domain Name: PERMISSIONEMAILCORP.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS1.MOUSESTYLEE.NET
   Name Server: NS2.MOUSESTYLEE.NET
   Name Server: NS3.MOUSESTYLEE.NET
   Name Server: NS4.MOUSESTYLEE.NET
   Status: clientTransferProhibited
   Updated Date: 11-feb-2007
   Creation Date: 17-nov-2006
   Expiration Date: 17-nov-2007

Some ips: permissionemailcorp.com. 65.185.91.199 (rr.com usa), 68.42.251.58 (comcast Michigan usa), 70.125.129.82 (rr.com usa), 71.118.101.91 (Verizon usa), 65.184.18.110 (rr.com usa). Good old Roach Runner with 3/5 of those

Hello to the French, and George Jones of Dallas. I wonder what happened to Mr Brown ?

domain: mousestylee.net
  reg_created: 2007-02-10 18:22:09
  expires: 2008-02-10 18:22:09
  created: 2007-02-10 19:20:52
  changed: 2007-02-10 20:00:44
  ns0: ns1.mousestylee.net
  ns1: ns2.mousestylee.net
  ns2: ns3.mousestylee.net
  ns3: ns4.mousestylee.net
  ns4: ns5.mousestylee.net
  transfer-prohibited: yes
  owner-c:
    owner-name: George Jones
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  admin-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  tech-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  bill-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active

permissionemailcorp.com - probably still points to China. Thank you for spamcop reports.

8 February: Domain update (as promised) - went through the list - i think that domains advertisingemailcorporation.com and permissionemailcorporation.com have no dns. There status is now set to yellow

Roberts Domains up: EMAILBROADCASTAUTHORITY.COM - china same host and permissionemailcorp.com (China) plus 'new' SEO spamming ops

7 February: Thank you for the spam report. Time permitting i will rescan dns sometime this week and report findings back here.

admin note: Those of you wondering why I have this large page is because it is really interesting to watch an individual spammer in action, if one is thinking while reading this page one can make very informed choices. take..

He is a spammer

is ok but an assumption, but below is better

He is, since he is using ..., blocked also by ... etc

3 February: Well meet permissionemailcorp.com - if it where a song it be a mix of the best (and worst) of Bobs domains listed elsewhere. Credit to Ed who was also spammed.

whois -h whois.dns.com.cn permissionemailcorp.com
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... permissionemailcorp.com
  Creation Date........ 2006-11-17 21:43:02
  Registration Date.... 2006-11-17 21:43:02
  Expiry Date.......... 2007-11-17 21:43:02
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns2.permissionemailcorp.com
  Name Server.......... ns1.permissionemailcorp.com
  Name Server.......... ns3.permissionemailcorp.com
  Name Server.......... ns4.permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31380
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.62

;; AUTHORITY SECTION:
permissionemailcorp.com. 43197  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns2.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns3.permissionemailcorp.com.

;; Query time: 2627 msec
;; SERVER: boris
;; WHEN: Sat Feb  3 17:18:30 2007
;; MSG SIZE  rcvd: 129

 whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

Go Chinese pandas yay!!! Haters of Spam oh yeah - sbl reference http://www.spamhaus.org/SBL/sbl.lasso?query=SBL47895.

2 February: Ed mails and notes some hosting changes ahoy. Also kanjerimada.info as a nameservice bot for advertisingemailcorporation.com - 14 days to go - god bless the french

Domain ID:D15682005-LRMS
Domain Name:KANJERIMADA.INFO
Created On:13-Dec-2006 06:58:09 UTC
Last Updated On:13-Dec-2006 07:29:09 UTC
Expiration Date:13-Dec-2007 06:58:09 UTC
Sponsoring Registrar:Gandi Sarl (R191-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:O-1069683-GANDI
Registrant Name:clarence Brown
Registrant Organization:clarence Brown
Registrant Street1:39 linden ave. n
Registrant Street2:
Registrant Street3:
Registrant City:westbrook
Registrant State/Province:Connecticut
Registrant Postal Code:06498
Registrant Country:US
Registrant Phone:
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:716d8553e2f50049c16849a27e126be6-1071472@owner.gandi.net
Admin ID:CB3541-GANDI
Admin Name:clarence Brown
Admin Organization:
Admin Street1:39 linden ave. n
Admin Street2:
Admin Street3:
Admin City:westbrook
Admin State/Province:Connecticut
Admin Postal Code:06498
Admin Country:US
Admin Phone:+1.8606695398
Admin Phone Ext.:
Admin FAX:+33.1
Admin FAX Ext.:
Admin Email: 316c1edc8824ac9ac9aea73301fab99a-cb3541@contact.gandi.net
Billing ID:C1249598-LRMS
Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Organization:GANDI sarl
Billing Street1:see also whois.gandi.net
Billing Street2:
Billing Street3:
Billing City:Paris
Billing State/Province:
Billing Postal Code:F-75003
Billing Country:FR
Billing Phone:
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:support@gandi.net
Tech ID:C1249598-LRMS
Tech Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Tech Organization:GANDI sarl
Tech Street1:see also whois.gandi.net
Tech Street2:
Tech Street3:
Tech City:Paris
Tech State/Province:
Tech Postal Code:F-75003
Tech Country:FR
Tech Phone:
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: support@gandi.net
Name Server:NS1.KANJERIMADA.INFO
Name Server:NS2.KANJERIMADA.INFO
Name Server:NS3.KANJERIMADA.INFO
Name Server:NS4.KANJERIMADA.INFO
Name Server:NS5.KANJERIMADA.INFO
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 

Dns queries for that all over the place, a big hi to clarence Brown i think. - Is Clarence Scott Richers (spammer of the ye olden days) possibly the technical cohort who was once named 'Charlie Brown' - which sounded strange to me even then in a media feature on Mr Richers house with a basement full of pcs spewing spam ? - if i may throw a spanner in.

Domain time and time for 'where is it now' game we like playing, stay tuned and we will right back after these adverts...

I confirm with ed that theemailbroadcastingcompany.com has no dns & emailbroadcastauthority.com is up (pay attention now)

dig emailbroadcastauthority.com
; >><< DiG 9.3.4 >><< emailbroadcastauthority.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56854
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailbroadcastauthority.com.   IN      A

;; ANSWER SECTION:
emailbroadcastauthority.com. 3600 IN    A       221.194.44.62

 whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

This concludes.

1 February: Changes to Robert's spam invoices scheme i note from the various spamcop reports i see (more always welcome) current scheme seems to be 123456LETTER, which is a slight variation 12345LETTER7 and then an end for this scam i note again. Its the small things that make Bob happy it seems.

Speaking of friends with 'imaginary work colleagues with email' with a new system (as designed) he's been saving the spams and can probably point out what your average soloway spammee gets quite easily. Should i be interested enough to get my finger out it might make another interesting feature for this page. - anybody think this might be fun ?

I'm beginning to think perhaps Rob McKenna (AG of WA 2004-2008) is on Robert Soloways payroll? - oh well its nice to know the position of such persons. His four year term of office ends in 2008.

admin note: I will publically lynch the next person who suggests that a class action suite be initiated against retard spammer known as robert or occasionally bob. I will have to learn the dark art of lynching first and i don't care what your skin colour (equal opportunity lynching sounds good) is either. Should anybody have an decent websites dedicated to the art of lynching (certified lynchers preferred) then I'd love to hear from you. So don't expect a quick lynch. While civil litigation might have a place it helps if both parties recognise each other should that not be the case then others are needed.

As to that person who thinks Robert is giving email marketers a bad name - welcome to the the party. Spamcop reports always welcome thank you for todays.

29 January: My domain owning friend emails and informs me like others at Opsan do that he finds that fake users (using catchall@domain.dom) are being created by Robert Soloway and then being used by pill pushers. Since it is recognised fact by followers of intelligent design theory (that's death to monkeys too) that we all need to take more asprin* as it is a well known fact in order to make intelligent design make sense is best when stoned.

So (hopefully you all got the joke in the above) what can we say now ? Anyhow your priest would probally recommend cystall meth instead apparently as its better than asprin but that's apparently illegal under the usa patriot act - Bin ladin,wmd and Meth now that's a reach but i suppose if being George Bushes public enemy numero uno your going to need some help from Robert Soloway.

So if inventing email addresses is optin then it raises some interesting questions for thedma.org for if nobody signed up, how might they optout (should that even be technically possible). I'd like an answer to that quandary by them.

Anyhow I doubt spammers r us (thedma.org) will respond. but I'm sure they would happily market meth too. One learns much in these short entries.

Thank you for the spamcop reports too, Sky at Opsan (see main links) notes a striking sameness about a website page design. - Which i added to the dmca section.

26 January: Thank you for the spamcop reports I notice that its now free again.

x] Invoice #: 12345LETTER7 - AMOUNT OWED: $0.00 
We Email Advertise Your Charity Web Site to 7,500,000 People

Odd so nothing new then there. Further unknown skills of Robert include selling fake watches (see opsan). Does Robert know no bounds? What further skills will he perform - stay tuned.

25 January: Super size portions of spamcop reports can be found today Thank you all. Super Fan Henrik returns and I will adding a new section called 'seo spammage' soon. Do Roberts 'talents' have no bounds ? mind you since I bet he can probably give you all 1009 variations on how the drug asprin is spelt and I look forward to seeing them in msn search real soon now.

I was just about to watch a nice dvd (Ballet Russes) when these activities come to my attention, first off the domains of webpositionexpert.com and nim-company.com come into the radar look very close to webpositionexpert.com who really is a seo spammer.

Pictures ? hell why not ! spot the difference.



and the original
Spot the difference (images can also be viewed full size) , seo spammers will note that neither has a url link.

That Looks like design theft from Robert (mail link to newportcorp@mailshack.com here. Apparently Bob has been certified since 2004 - Sigmund must had a large queue of more deserving nut jobs to certify first - a shrinks job is never done ho hum. Robert being a crap emailer needs the services of mailshack.com - that's another cheap jibe but quite funny.

Owner, Administrative Contact, Technical Contact, Billing Contact of the thefted domain is: Simon Skinner (ID00127660) PO Box W908 WoodsCentre St Johns, WI 00000 Antigua and Barbuda Phone: +268.5609733 Email: simon@webpositionexpert.com. Is make no comments about his operation but Roberts latest domain registration is:

whois nim-company.com
[Querying whois.verisign-grs.com]
[whois.verisign-grs.com]

Whois Server Version 2.0

   Domain Name: NIM-COMPANY.COM
   Registrar: REGISTER.COM, INC.
   Whois Server: whois.register.com
   Referral URL: http://www.register.com
   Name Server: DNS11.REGISTER.COM
   Name Server: DNS12.REGISTER.COM
   Status: clientTransferProhibited
   Updated Date: 02-aug-2006
   Creation Date: 26-jul-2006
   Expiration Date: 26-jul-2007

Registrant:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA

Email: 4559a7b10a1e672a010ec780f8713151@domaindiscreet.com

Registrar Name....: REGISTER.COM, INC.
Registrar Whois...: whois.register.com
Registrar Homepage: www.register.com

Domain Name: nim-company.com

Created on..............: Wed, Jul 26, 2006
Expires on..............: Thu, Jul 26, 2007
Record last updated on..: Sun, Jan 14, 2007

Administrative Contact:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA
Phone: 1-902-7495331
Email: 4559a7a60a1e672a0108df5d9cf350be@domaindiscreet.com

Technical Contact:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA
Phone: 1-902-7495331
Email: 4559a7b70a1e672a01ac888d69003f00@domaindiscreet.com

DNS Servers:

dns11.register.com
dns12.register.com


Register your domain name at http://www.register.com

American dns registrar servers

dig nim-company.com

; >> DiG 9.3.3rc3 << nim-company.com
;; global options:  printcmd
;; Got answer:
;; -<<HEADER - opcode: QUERY, status: NOERROR, id: 37276
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;nim-company.com.               IN      A

;; ANSWER SECTION:
nim-company.com.        14400   IN      A       69.49.96.12

;; AUTHORITY SECTION:
nim-company.com.        43200   IN      NS      dns12.register.com.
nim-company.com.        43200   IN      NS      dns11.register.com.

;; ADDITIONAL SECTION:
dns11.register.com.     20132   IN      A       216.21.234.76
dns12.register.com.     10782   IN      A       216.21.226.76

;; Query time: 424 msec
;; SERVER: ?#53(?)
;; WHEN: Thu Jan 25 19:08:02 2007
;; MSG SIZE  rcvd: 130

Its spammy florida too

whois 69.49.96.12
[Querying whois.arin.net]
[whois.arin.net]

OrgName:    InternetNamesForBusiness.com 
OrgID:      INFB
Address:    500 East Broward Boulevard
Address:    Suite 1700
City:       Fort Lauderdale
StateProv:  FL
PostalCode: 33394
Country:    US

NetRange:   69.49.96.0 - 69.49.127.255 
CIDR:       69.49.96.0/19 
NetName:    MEGA-3
NetHandle:  NET-69-49-96-0-1
Parent:     NET-69-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MEGANAMESERVERS.COM
NameServer: NS3.MEGANAMESERVERS.COM
Comment:    
Comment:    -
RegDate:    2003-05-22
Updated:    2004-12-13

RTechHandle: ZI51-ARIN
RTechName:   InternetNamesForBusiness 
RTechPhone:  +1-954-323-0075
RTechEmail:  admin@internetnamesforbusiness.com 

OrgTechHandle: ZI51-ARIN
OrgTechName:   InternetNamesForBusiness 
OrgTechPhone:  +1-954-323-0075
OrgTechEmail:  admin@internetnamesforbusiness.com 

# ARIN WHOIS database, last updated 2007-01-24 20:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Trademark (dmca) theft Further Image copyright abuse (thanks to Andy) has been tracked down. Please go see dynamicbizserv.com for original shaking hands zombies (see images of websites for evidence) and effinop.com (which is nearly a form of verbal abuse in england)

update (29 Jan 07) spot something different effinop.com Clone see image, which Sky over at opsan cannot a company called http://www.curanow.com/ seems to maintain it. At least he changed the ceo picture on his copy - and how do you do - 'Hello did you know were strangely linked to a spammer called Robert Soloway' is what there thinking should a photograph ever do that after all the camera never lies does it.

24 January: Another superfan Andy drops in and informs that i have been rather lacking in reporting the ex Robert Soloway domains of catsdogsandpets.com, and the other easy to remember name of phone-example.net on this page for i humbly apologise being a lowly fan and missing although in my defence i've heard mention of them but no more than that.

Andy reports that they now 'rent' these domains and not Robert Soloway - which it is reported he still claims them on various website offering evil stuff. So if your visiting hello, its time to mug up on our favourite spammer (robert that is).

admin note: I don't object to links but when the referrer says (robert_soloway.domain x many visits) you do start to wonder.

Anyhow I hope that Andy 'makee workee' for thba (his china spam provider) and the ex Robert the domains will be added to the list and be greyed out to indicate a new owner as is my sop. That's enough of that background stuff.

Dull ? - here never tomorrow I announce where saddams wmd went so stay tuned.

23 January: Powned!

Nice! (google groups) Robert using MANGOORANGEE.ORG (google groups)our friends at Gandi

emailbroadcastingcompany.com

  Name Server.......... ns4.mangoorangee.org
  Name Server.......... ns3.mangoorangee.org
  Name Server.......... ns2.mangoorangee.org
  Name Server.......... ns1.mangoorangee.org

Thank you for the spamcop reports

22 January: Big dollop of spamcop addresses, Thank you - I also seem to be officially recognised by Robert in some capacity or other.

Screen shot well I'm not sure where and in what context. The link will not take you to Roberts spam offering.

'Super Fan' Henrik has dazzled us recently with some bits of information - which i hopefully credited properly by the latest is that http://70.85.187.88/ was reconfigured through a Chinese dns bug and is no doubt causing young Robert a few problems - Robert now using a bot net on 221.194.44.62.

Bananas humbly salutes Henrik and offers the Title of distinction 'head super fan' should it desired. Bananas feels unworthy to be called a fan and will continue to write this and continue to document his sightings as and when they appear.

Its nice to know that my views (along with opsans blog, and the rokso record too) have been fully endorsed by Robert Soloway (if he can lie about wikipedia quotes on website, then i have no problem doing it) Nice one Bob!

As ever - looking forward to tomorrow!

21 January: 'Please sir can we have some more spamcop reports please*' have been added. My Domain owner friend sends me ip addresses too.

admin note: Meebo (flash plug in) has been trashed since it did not work in all flavours of ie, and firefox uses another html method to load the flash that is different to ie if your trying write valid xhtml code. Since i don't approve of flash and it is was rather of slow, I can do without it. Should meebo provide a non flash plug in that works with valid xhtml and in all the popular browsers then it might return.

* Oliver Twist ? Charles Dickens reference - better check that you still have your hankerchief (blowing nose cloth).

20 January: Spamcop reports added Danke, Robert Seems to be giving his junk away* and not 'frauding' persons of $15 a spam email. I note from those Spamcop reports,

* you will pay. But it seems Roberts invoice phase has finished for now.

19 January: admin: Added Roberts home isp link and 'recent sightings' to main menu. Lets make it it fun for mdm.net shall we ? big hello to Tim Ensley. But on with the show.

Sky over at Opsan says 'submit-me-now.com' strangely shares some similarities with liu fei/nan chang whois entries documented elsewhere in this page. Is Bob getting out of spam and into seo spamming ? don't worry its been sbl'ed hgc.com.hk And Dog reports that 'emailbroadcastingcompany.com' is also using Gandi's phduaisarida.com for dns fun and games but it still points to [124.254.44.*] which has been documented before.

Thank you for the spamcop reports.

18 January: Thank you for the spamcop reports more always welcome. Henrik over at Opsan reports that Robert appears to use a hoster in Seatle for ordering and opens a file of html - think i understand you - nice one Henrik. Think you might have fingered Roberts cable tv connection/stuff OK that new isp fingered is http://www.mdm.net/ or http://www.mdmbusiness.com/ Have a chat with Washington & Oregon Tim Ensley Commercial Services Account Executive mdmbusiness.com 3633 136th Pl SE Suite 107 Bellevue, WA 98006 425.945.1759 800.829.2225 x1159 Email: mdmbusiness_nw@mdm.net Millennium Digital Media is a privately held company headquartered in St. Louis, MO

whois 66.235.10.215
[Querying whois.arin.net]
[whois.arin.net]
Millenium Digital Media MDM-BLOCK-1 (NET-66-235-0-0-1) 
                                  66.235.0.0 - 66.235.63.255
Millennium Digital Media SEATTLE-MILLENNIUM-DIGITAL-MEDIA (NET-66-235-8-0-1) 
                                  66.235.8.0 - 66.235.11.255

CustName:   Millennium Digital Media
Address:    4316 S104 PL
City:       Seattle
StateProv:  WA
PostalCode: 98178
Country:    US
RegDate:    2005-05-04
Updated:    2005-05-04

NetRange:   66.235.8.0 - 66.235.11.255 
CIDR:       66.235.8.0/22 
NetName:    SEATTLE-MILLENNIUM-DIGITAL-MEDIA
NetHandle:  NET-66-235-8-0-1
Parent:     NET-66-235-0-0-1
NetType:    Reassigned
Comment:    
RegDate:    2005-05-04
Updated:    2005-05-04

RAbuseHandle: MAN23-ARIN
RAbuseName:   MDM Abuse Northwest 
RAbusePhone:  +1-314-802-2400
RAbuseEmail:  abuse-nw@mdm.net 

RNOCHandle: MNN-ARIN
RNOCName:   MDM National NOC 
RNOCPhone:  +1-314-802-2400
RNOCEmail:  nnoc@mdm.net 

RTechHandle: MIA7-ARIN
RTechName:   MDM IP Administrators 
RTechPhone:  +1-314-802-2400
RTechEmail:  ipadmins@mdm.net 

OrgAbuseHandle: MAN23-ARIN
OrgAbuseName:   MDM Abuse Northwest 
OrgAbusePhone:  +1-314-802-2400
OrgAbuseEmail:  abuse-nw@mdm.net

OrgNOCHandle: MNN-ARIN
OrgNOCName:   MDM National NOC 
OrgNOCPhone:  +1-314-802-2400
OrgNOCEmail:  nnoc@mdm.net

OrgTechHandle: MNN-ARIN
OrgTechName:   MDM National NOC 
OrgTechPhone:  +1-314-802-2400
OrgTechEmail:  nnoc@mdm.net

Henrik Thank you! seems to make sense.

17 January: Usual operations from Robert a friend notes to me. Other Opsan reports speak of stock 'pimp n dump' spams to known soloway 'get his spam addresses'. Well nothing unusual there then anyhow i was getting bored of viagra spam's anyhow.

Spamhaus sbl's for those of you interested in such matters vol.cz (europe) kornet.net Korea with another relationship with the Polyakov's ? (mentioned before), Roberts range now gwbn.net.cn (not the whois owners apparently Beijing THBA Technology Co,.Ltd), and finally not forgeting CNCGROUP Shandong province network

 whois gwbn.net.cn
[Querying whois.cnnic.net.cn]
[whois.cnnic.net.cn]
Domain Name: gwbn.net.cn
ROID: 20021209s10021s00016816-cn
Domain Status: ok
Registrant Organization: 中国长城计算机集团公司
Registrant Name: 潘志
Administrative Email: panzhi2000@yahoo.com.cn
Sponsoring Registrar: 北京中科三方网络技术有限公司
Name Server:ns2.gwbn.net.cn
Name Server:ns1.gwbn.net.cn
Registration Date: 2000-04-07 00:00
Expiration Date: 2007-04-07 00:00

I think we have all seen many of those mentioned here before in this rather long file. - of note PHDUAISARIDA.COM and Gandi's spam policy don't seem to work since its still with us.

Oh well god bless mba management bullshit.

m'excusent - I thought gandi was that indian registrar and not my european neighbors. A 'Freudian slip' on my part. I must ask Sigmund about my relationship with Bananas while I'm at it next time.

Apparently he died so i wont ask him damm - (readers tag under humour) Thanks Ed

15 January: Goodness gracious me - Gandi seem now to hate spam, lets see how long there anti spam stance lasts (not long imho sounds like short term bullshit) anyhow Ed spots that advertisingemailcorporation.com is down for a minute but added as well the domain EMAILBROADCASTAUTHORITY.COM.

Domain Name.......... EMAILBROADCASTAUTHORITY.COM
  Creation Date........ 2006-09-12 22:42:08
  Registration Date.... 2006-09-12 22:42:08
  Expiry Date.......... 2007-09-12 22:42:08
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.phduaisarida.com
  Name Server.......... ns3.phduaisarida.com
  Name Server.......... ns2.phduaisarida.com
  Name Server.......... ns1.phduaisarida.com

Ed reports dns fun and games from phduaisarida.com which is Indian registered. see what you mean Ed !

domain: phduaisarida.com
  reg_created: 2007-01-09 17:30:36
  expires: 2008-01-09 17:30:36
  created: 2007-01-09 18:29:48
  changed: 2007-01-09 18:32:04
  ns0: ns1.phduaisarida.com
  ns1: ns2.phduaisarida.com
  ns2: ns4.phduaisarida.com
  ns3: ns3.phduaisarida.com
  ns4: ns5.phduaisarida.com
  transfer-prohibited: yes
  owner-c:
    owner-name: Joe Johnson
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  admin-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  tech-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  bill-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42

My geography of the west coast of america is improving but that does sound odd, other domain should ring a telephone bell too.

Ed says: advertisingemailcorporation.com [124.254.44.10] & theemailbroadcastingcompany.com [124.254.44.10] & emailbroadcastauthority.com [69.212.194.93] - botnet - so round robin revolves. Lets do a whois shall we !

whois 124.254.44.10
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

No surprises there - Hello again are the hills alive with Song Wang ? it seems so. Can a 'fan' port scan 124.254.44.10 please all for science as they say.

13 January:Somebody (no not i) Port scanned advertisingemailcorporation.com and reported it - results below - what's slightly freaky here is that it appears to be running smtp - Robert does not like usually getting email so I'm thinking that helpfull (pro spam) China hosting company think this boy is the real deal reputable american businessboy. An open smtp (that's email for any beauty comestic journalists reading this) port does not mean its configured - but it is verging into odd Robert Soloway territory here. Anyhow another fan reports the following.

advertisingemailcorporation.com - 124.254.44.41

PORT STATE SERVICE VERSION
21/tcp open ftp WS FTPd 4.0.0
25/tcp open smtp IMail NT-ESMTP 8.05 37868-1
26/tcp open tcpwrapped
43/tcp open whois?
53/tcp open domain Microsoft DNS
79/tcp open finger?
80/tcp open http Microsoft IIS webserver 6.0
106/tcp open pop3pw IPSwitch Imail pop3 password change daemon 8.05
110/tcp open pop3 IMail pop3d 8.05 596833-37
113/tcp filtered auth
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1023/tcp filtered netvenuechat
1025/tcp filtered NFS-or-IIS
1030/tcp open msrpc Microsoft Windows RPC
1032/tcp open iad3?
1033/tcp open msrpc Microsoft Windows RPC
2000/tcp open ssl/http RemotelyAnywhere remote PC management webserver 6.20.467
3306/tcp open mysql MySQL 5.0.18-nt-max
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
8888/tcp filtered sun-answerbook

Its a windows box too it appears. So if your into whatever go have fun should you feel inclined to.

For instance Microsoft China might be inclined to check if the copy of windows license is legit im sure that Beijing THBA Technology Co,.Ltd. No68 WanQuanHe road,Haidian district,Beijing CN would like to hear from them.

Other thoughts i leave to your imaginations (health and beauty journalists) that is called 'pretend'. I'm no windows add-on product expert (iis cal's etc) but there might be more violations on some of that stuff.

Anyhow Robert likes Windows as an os is the one impression i think we can all walk away with here which considering his spamis rantings from a couple of years ago is slightly strange. So nothing new there then.

12 January: Added Spamcop report, thank you. Just to remind you that Bobs bullet proof (and hate spam chinese folk) at Beijing THBA Technology Co,.Ltd. No68 WanQuanHe road,Haidian district,Beijing CN is still his hosting provider. Make your own mind up* about Chinas anti spam 'initiatives' (* fox news viewers should ask Bill O'reilly and Rupert Murdoch for Guidance instead)

10 January: Added Spamcop reports, thank you. Lets hope some fraudster decides to phish for american express card details using Roberts email lists you know: 'please update your details' scam. That would be karmic after all American Express appear approve of that sort of thing.

Speaking of scammers: A big hi to the Nigerian who visits here and never finds anything of value.

9 January: Added Spamcop reports thank you - since a friend was lucky enough to get one (which they strangely also sent too) - I got a copy

Return-Path: user @ domain
Received: from adsl-ull-220-254.50-151.net24.it ([151.50.254.220]) for user  @ domain; date
To: user@domain
X-SA-Exim-Connect-IP: 151.50.254.220
From: user @ domain
[user@domain] Invoice #: 12345 - TOTAL: $15.00
We Email Advertise Your Web Site to 8,000,000 People

VIEW TRANSACTION BELOW:
http://www.advertisingemailcorporation.com/

Well my friend was surprised that he has an office in Italy, and sending spam to himself and i am pleased too. Its been a while since I've seen a robert spam with complete headers.

What does this say ? - very spammerish, and beware that you clean out user and domains when dealing with Mr Soloway. I will keep this civil - I think the actions of Bob speak more eloquently than a Bananas rant can ever achieve.

'RS' another new Robert 'fan' over at opsan notes that Robert can only process American Express cards these days, Visa and Mastercard seem to have withdrawn his ability to process visa and mastercard payments* at this time based on his website. No doubt this will change but it seems American Express like purveyors of spam.

* chargebacks ?

7 January: Added Spamcop reports thank you - the $15 spam tracking system seems to be a complete Robert screw up. Sky over at Opsan says

I'm receiving about 3-10 a day. Every one of them has different invoice numbers, even the ones that arrive in batches. The spam (and considering he's sending false invoice statements constitutes fraud) 

So my conclusion too is it is just a fraud then, and not a spam tracking system like spf. Sky has the 'advantage' of getting spams to an individual account where the consistency of the numbers ca be checked. That is something i am unable to do due to the actions of a certain person.

Anyhow enough of my gripes.

5 January: Added Spamcop reports thank you - the $15 per spam scam continues. Guess of latest up time for emailadvertisinginc.com made, highly speculative based from reports i have (see 3rd Jan Entry) which should be below.

3 January: Added spam cop reports latest tracking method by Robert Slimeball Soloway is using invoice number with a low $ sum which points you to his website, varying quantities of spammage offered by Robert from 3 million to 9 million id'ed by Sky at Opsan. (all of which are high quality targeted leads - that's humour btw)

Invoice #: 12345 TOTAL: $15.00
We Email Advertise Your Web Site to 3,000,000 People

Example (from spamcop report) If your reporting spam number '12345' is my creation and does change as noted - beware its bit like Roberts spf exploit he did of olden times.

Moving onwards - (stay awake) dns switch for emailadvertisinginc.com which is using round robin dns fun and games compliments of MADAPGYRJ.INFO report host list is extensive but 83.42.160.135, 67.166.215.4, 71.134.191.251, 70.114.194.125, 12.178.131.98, 12.214.232.112, 66.176.188.221 and 71.228.236.208 got fingered by the comrades at spamcop.net as places of where that domain 'lived'.

Robert still here though.

124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN

Whether the dns fun and games are working is a judgement call others can make - his last attempt at this got rather fucked up. For the record lets get the new dns providers whois info in here.

Domain ID:D15660292-LRMS
Domain Name:MADAPGYRJ.INFO
Created On:12-Dec-2006 17:50:15 UTC
Last Updated On:02-Jan-2007 10:12:44 UTC
Expiration Date:12-Dec-2007 17:50:15 UTC
Sponsoring Registrar:Gandi Sarl (R191-LRMS)
Status:CLIENT HOLD
Status:TRANSFER PROHIBITED
Registrant ID:O-1069542-GANDI
Registrant Name:Richard Sheldon
Registrant Organization:Richard Sheldon
Registrant Street1:781 Pleasant St.
Registrant Street2:
Registrant Street3:
Registrant City:Rochdale
Registrant State/Province:Massachusetts
Registrant Postal Code:01542
Registrant Country:US
Registrant Phone:
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:af337cb29bb0b8e08ea0664b485533b1-1071331@owner.gandi.net
Admin ID:RS2121-GANDI
Admin Name:Richard Sheldon
Admin Organization:
Admin Street1:781 Pleasant St.
Admin Street2:
Admin Street3:
Admin City:Rochdale
Admin State/Province:Massachusetts
Admin Postal Code:01542
Admin Country:US
Admin Phone:+1.5088929138
Admin Phone Ext.:
Admin FAX:+33.1
Admin FAX Ext.:
Admin Email:c4691c4eaf205b67eef46ac289fd01be-rs2121@contact.gandi.net
Billing ID:C1249598-LRMS
Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Organization:GANDI sarl
Billing Street1:see also whois.gandi.net
Billing Street2:
Billing Street3:
Billing City:Paris
Billing State/Province:
Billing Postal Code:F-75003
Billing Country:FR
Billing Phone:
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:support@gandi.net
Tech ID:C1249598-LRMS
Tech Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Tech Organization:GANDI sarl
Tech Street1:see also whois.gandi.net
Tech Street2:
Tech Street3:
Tech City:Paris
Tech State/Province:
Tech Postal Code:F-75003
Tech Country:FR
Tech Phone:
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:support@gandi.net
Name Server:NS1.MADAPGYRJ.INFO
Name Server:NS2.MADAPGYRJ.INFO
Name Server:NS3.MADAPGYRJ.INFO
Name Server:NS4.MADAPGYRJ.INFO
Name Server:NS5.MADAPGYRJ.INFO
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 

Massachusetts is in France ? - that's americans and geography for you. Big hi to Richard Sheldon who now has no hosting for it.

Regrettably no one submitted an entry for my Competition, so its a pot of banana compost the next competition i have. Well that appears to be all - advertisingemailcorporation.com and theemailbroadcastingcompany.com still up 124.254.44.41 (see above) Go Chinese Panadas go.

As to Roberts latest spam procedure (having seen more), I be in two minds - it could be perceived as a fraud or a sign of desperation. Fraud thinking is: Should not the Seattle (of Washington State) tax collectors might in involved since having no corporation registered and theoretically taking money would assume that state taxes would need to be paid? From a consumer point of view if anybody could pay to be removed to raises the point that unsubscribing from the spam list never is going to happen, so I'd imagine they would also go join the queue of wronged person in a civil court. Perhaps i go visit his website, then again perhaps i wont.

Personally i prefer my 'desperation view'. Over the new year there was some great fun in nanea where Robert gained yet another 'fan'. Love him or loathe him hes class entertainment.

2007

24 December My Compliments to all the helpers of this page I hope that whatever you do, you also have a good new year. Robert should Santa not visit you this might help explain a few things. Image credit Shamelessly stolen from some Australian called Russell Coker ages ago.

If your flying today please ask the pilot to be carefull. Our default Robert games of 'up and down domain name', 'what regional registry', and not forgeting 'is that the china panda' party games that this webpage enjoys inventing will resume from tomorrow onwards.

Suggestions for Christmas Robert Soloway games welcome. We have songs.

22 December Surprise no dns fun and games but a simple change of chinese supplier: these idiots seem new to the Soloway empire (well it is China) prioritydns.info is dns supplier (dubious? views) up Robert domain is THEEMAILBROADCASTINGCOMPANY.COM which has taken a back number (SBL46638) advertisingemailcorporation.com and also points here. Thats it 'up' domain name wise at current time (as far as i know).

apnic.net with "124.254.44.41"...
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

Spamcop reports added, thanks!

21 December Spot the connection ? from http://www.spamhaus.org/SBL/sbl.lasso?query=SBL49240 221.194.111.54/31 is listed on the Register Of Known Spam Operations (ROKSO) database as being assigned to, under the control of, or providing service to a known professional spam operation run by Robert Soloway - Newport Internet Marketing. theemailbroadcastingcompany.com .55 is already occupied by Alex Blood SBL listing, so we'll document Robert Soloway's site in this listing as a /31. (The whole /24 is listed, anyway.)

Spamcop reports added. thanks,

19 December DNS posting (stay awake please) advertisingemailcorporation.com points to 221.194.111.55/32 and (Polyakov) SBL47267 Reading that indicates that our Soloway 'polonium-210' friends are 'sending the spam before DNS is live to prevent body-checks, and Hijacking virus-infected PCs to proxy-relay spam from 66.185.126.155' (thats Serverflo look below) links in that range here to Finance scams and all things non Robert related like i don't track.

OK wake up now, some spamcop reports added. Above sort of explains a few things, that still seems dumb. Anyhow both several and Poyakov have honourable mentions in this page. That's the same isp CNCGROUP-HE robert is hosting from (on one ip address)

rumour/bananas bad assumption time: one might infer from this situation that Robert Soloway is unable to directly purchase spam support from our friends the Panda's, and has to resort to spammers with better 'tricks' to get hosting ? Is Bob a spammer - yes, and does Bob need other spammers help - yes.

Views please.

18 December Sorry but its time for a dns nameserver posting (sorry), normal service will resume soon. The dns of advertisingemailcorporation.com points to managednameservers.com ROK6101 which links to spammy indian called Daniel Mankani (ROK3533) being of Indian origin, who reportedly according to spamhaus does his spamming from Singapore of interest perhaps is this Michigan lawsuit The good news is hes yet another spammer doing things with another spammer. Feel free to adjust your views on indians.

Now should you be still awake also added a couple of spamcop reports. Robert seems to picked up a european spambot supplier. Also like to remind you about the competition, you could be the proud winner of a very exclusive banana skin - so what are you waiting for.

Regardless of your views the Image of Kkaran Bahree (google him) just fits perfectly that not everything from India is good. Either 'exported' or domestic.

admin: I screwed up so I'm re-adding advertisingemailcorporation.com to domain list summary and removing advertisingemailcompany.com as an 'up' host- duh companies/corporations it blurs at times. Having funny five minutes here excuse me. 'Close' but wrong same number of 'up' hosts remain.

Opsan update: Mother Natures ice storm apparently knocked out Opsan and everybody else too for that matter, ert: Tuesday (usa time zone) for electrical power restoration.

17 December silly question: You think Santa gets Robert Soloway spam ?. Anyhow with Opsan in a state of flux. Its time for a fun game of up and down domain. Polyakov (fellow spammer) link still active according to Ed but issues with service (from a spamcop report) - www.advertisingemailcorporation.com (checking ip) IP not found. If they cant find it don't expect us to.

;; WHEN: Sun Dec 17 18:25:36 2006

theemailbroadcastingcompany.com. 43195 IN A     221.194.111.55
advertisingemailcorporation.com. 352 IN A       221.194.111.55

Which seems to be it (domain wise) that's China (seen before here ) 221.192.0.0 - 221.195.255.255 CNCGROUP-HE. It appears Roberts sudden domain fun and games have cooled down.

Updates to domains status changed - using historical evidence from 5th december to generate 'uptimes'. Whatever you think one can hardly say Robert is a consistent 86400x365 spam operation. That says too much.

So if you send spam to Santa - does he still come? oh the mysteries of life*. If you know contact us it might explain why Bob does what he does even on christmas day.

* = humour for those whom don't get it

15 December Spamcop reports added, it seems Robert is looking for new botmister, since some of us report a drying up of south american owned pcs doings Satan's (sorry) soloways spam. Anyhow having just started christmas preparations i was wondering if Bob would be working over the christmas period. Somehow i think he will be.

admin: html 'code' might get a bit screwed up while i add a 2007 daily planner over the weekend - table work

its been a good year here since Bob has not really been able to keep domains up and running for long and the dns games of recent become a complete failure since half the time the thing didn't work. Then i finally got my hands on the spam package and was able to debunk a few of those Soloway fibs - if that's 'opt in' then George W Bush is a communist party member. So overall whatever you think about the state of play its been an interesting year with some interesting developments. Of note to those of you expecting 'progress' and not 'getting it' please do note that the continued links to spambotted pc's worldwide, association with other spammers (or isps with other spammers on) and the dns fun and games means Roberts pool of usual haunts is remaining the same.

Here end that rather long paragraph on the year. But whatever happens im in no doubt that the spamlist part of Robert Soloway is a spammer, if this rather large page of logging where when and how Robert is does not work for you then perhaps you can offer me a better explanation* - So bananas in the falklands is proud to have its first competition

COMPETITION * in this competiton please explain why my use of an isp for over a 12 months period is strange and Robert Soloways switching of dns/hosting and utilising random pcs world wide is better than my usage of the internet. Should you find that example 'limiting' then compare Soloways operation to a large corporation (lets take google here) and asks the question how often do they switch providers. The best entry plus your email will be featured on this page.

The winner will also receive a used banana skin in the post if they provide there postal address. So go get writing send your entry in by the 31st December 2006. Bananas judgement is final so no whining.

Good luck.

14 December Been busy with other nonsense, back to usual nonsense Spamcop reports added, Ed in Opsan (plus Dog and Sky) note SPAMHAUS SBL48865 = tinyurl.com/ynff7r Source of proxy/botnet hijack spamming TCP stream analysis of a virus-infected/trojaned PC reveals that it is being hijacked on proprietary high ports from the spammers illegal proxy-mailing server on 66.185.126.88 serverflo.com (current spam listing) reputation What is interesting to note that hes been here before, and the domain names additions had since dried up. Rev BeerGoggles also notes that our high princes of spam (indian robots at gandi) have finally done something about haufna.biz for now whom where providing Bob with dns services. Maybe we will be seeing both gandi, and sevrflo soon here ?

9 December admin: spamcop display changed (sorry).

8 December Back on the Charity scam again, ever since Robert removed all his charities he would like to think he 'supported' from his spams - Sky reports that a made for robert email address got hit with a charity spam for savechilds.net - which has an odd domain name look uk of chinese and russia info - it null routes but the point is that after Sky unsubscribed the address* the spam started to roll in.

* Evidence of this can be seen from the opsan link, an indication that unsubscribing from Robert = more spam can be seen from my now defunct pages which the internet wayback machine has an record of, and i still do have the original files somewhere before i called time on the experiment.

Those of you unaware i have an original spam package which was donated to me for documenting, the link can be found on this page, it starts to explain why the Robert unsubscribe (for more spam) form looks the way it does. Whatever your views on spam/advertising I ask you to visit the link (if you so interested) and make up your own mind.

Add to about bob section.

Spamcop reports added - now with id views please.

6 December I'll keep this short (rather than bore you to death). Lets make opendns.com explain it "You typed www.emailadvertisinginc.com, which doesn't currently resolve."

The haufna.biz dns operation might be 'clever' at obscuring Roberts chinese hosts but when they don't work (and i know that robert has chinese hosting) then I see little point to these servers - if there not going to relay the request back to China.

So is emailadvertisinginc.com up? technically maybe but for some of the time only and cannot be described as 24x7 hosting. If opendns cant find it well just this suits ok. If opnedns cant figure it out where it might be, im not going to. Spamcop sightings added. Happy Wednesday all - Fin.

5 December Delayed from Monday (extra non Soloway fun n games) Another 'quiet weekend' for Robert. Latest lovers who be the Polyakov (Alex Blood/Alexander Mosh/AlekseyB/Alex Polyakov) spam gang (spamhaus: SBL47267 link tinyurl.com/y2g34u ) Well scum with villainy together is something i approve of I refer to.

ns1.optinemailcorp.com. 2D IN A 221.194.111.55 - SBL47267

OK think I've discovered a 'bullet proof' (others have been informed of) technique, and 'bullet proof' should mean something Robert. A method to stop the dns man in the middle* fun and games which continues. The extra villinary factor just makes it it too good to ignore. Anyhow I'll be testing it out this week since im really interested in where things are hosted, rather than who bob would like pretend it is and is but technically not there.

So please do excuse me while i check the new technique for bugs. Roberts Old fiends of haufna.biz has been reported for bad dns according to Ed at Opsan. The moral is that once ignored name has attracted some unwanted fame and linked other spammers to Robert. using my domain list (?nbs? = Robert's mentally retarded fan club) means i should ignore those other fools - who of note Name King sound a fishy outfit.

;; WHEN: Mon Dec  4 09:10:44 2006
dig theemailbroadcastingcompany.com

; <<>> DiG 9.2.4 <<>> theemailbroadcastingcompany.com

;; ANSWER SECTION:
theemailbroadcastingcompany.com. 86400 IN A     221.194.111.55
advertisingemailcorporation.com.  3600 IN A     211.155.132.206
permissionemailcorporation.com.   3600 IN A     211.155.132.206
broadcastemailingagency.com.      3600 IN A     211.155.132.206

First One CNC Group CHINA169 Hebei Province Network, remaining three (still China) and hosted by old friends of Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd - (not a spelling mistake Dns games seem only to be with emailadvertisinginc.com first three american dupes, forth ip is a bogon and is unreachable, other points to the middle east - likely to change too but all probably redirect to above 211.155.132.206 or 221.194.111.55 (both china)

ANSWER SECTION:
emailadvertisinginc.com. 	180    IN A       68.79.49.138
emailadvertisinginc.com. 	180    IN A       68.81.168.165
emailadvertisinginc.com. 	180    IN A       71.137.236.199
emailadvertisinginc.com. 	180    IN A       121.72.7.78
emailadvertisinginc.com. 	180    IN A       212.118.8.74

Last three, Germany, China, ?american ? enom, dont look like Bob - emailadvertisingagency.com status unknown ? Bob is Nils Buurman ?

Registration Service Provided By: BlueYellow
Contact: info@blueyellow.nl
Visit: http://www.blueyellow.nl

Domain name: emailadvertisingagency.com

Registrant Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Administrative Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Technical Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Status: Locked

Name Servers:
   ns1.sedoparking.com
   ns2.sedoparking.com

Creation date: 21 Apr 2005 16:00:47
Expiration date: 21 Apr 2007 16:00:47

emailadvertisingagency.com. 	  600 IN A      212.227.34.3 (sedo)
broadcastemailcorporation.com.   3600 IN A      221.10.254.97 (sedo)
emailadvertisingcorporation.com. 1800 IN A      69.25.142.8 ?not bob ?

* old hacker technique: how do I really know (or you) that say www.whitehouse.gov really hits the server at the other washington, rather than say Osama's cave bunker in Crawford,Texas www server ?. Anyhow go think about it

Main Event time what is going on with emailadvertisinginc.com well im getting host not found. Its either a: screw up by the Polyakov persons, b: my technique needs refining, or c: my dns is screwed (looks likely) Juri is out on that since i cannot even update this page.

Mass of spamcog ips added too, thanks!

admin note: tinyurl links will be replaced with full urls from now on.

1 December Spamcop report added with the amazing observation from Robert that there be 25 days (now less) to Christmas. Since Bob has spammed on Christmas day you get to wonder what christmas is like in the Soloway household in his mothers Cotati residence / or his Seattle one man non registered corporation and his voicemail machine - perhaps it does not happen ?, or he and the voicemail thing do something?

Anyhow with that display of Robert brain power will wonders ever cease?

A solution to the dns games might have been found. Things still (as i suspected) point to China 211.155.132.206 The good news is that new method seems consistent.

30 November Musical chairs continues (party games too) and trip to estonia took place - did you enjoy it ? from a spamcop report.

Host www.emailadvertisinginc.com (checking ip) = 62.65.236.113
    host 62.65.236.113 (getting name) = pc113.host1.trt.starman.ee.

So how is this happening, i don't particularly wish to dilute this page with other stuff but it seems that that's a battle lost, anyhow lets just say Comrade soloway is using the dns at haufna.biz, the dns refresh tricks are just that - consider them a supplier to Bob. Quite how 'willing' 62.65.236.113 was to host emailadvertisinginc.com is another discussion too.

whois haufna.biz
Domain Name:                                 HAUFNA.BIZ
Domain ID:                                   D15124532-BIZ
Sponsoring Registrar:                        GANDI SARL
Sponsoring Registrar IANA ID:                81
Domain Status:                               clientTransferProhibited
Registrant ID:                               O-1056924-GANDI
Registrant Name:                             nancy j wasiuk
Registrant Organization:                     nancy j wasiuk
Registrant Address1:                         22 rockledge terrace
Registrant City:                             pompton plains
Registrant State/Province:                   New Jersey
Registrant Postal Code:                      07444
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.9736169759
Registrant Email:                            d6e3129d8c7267c16edc77bef4ce6567-1058713@owner.gandi.net
Administrative Contact ID:                   NJW3-GANDI
Administrative Contact Name:                 nancy j wasiuk
Administrative Contact Address1:             22 rockledge terrace
Administrative Contact City:                 pompton plains
Administrative Contact State/Province:       New Jersey
Administrative Contact Postal Code:          07444
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.9736169759
Administrative Contact Facsimile Number:     +33.1
Administrative Contact Email:                716c88e34150afa0fbb6b5964a122a04-njw3@contact.gandi.net
Billing Contact ID:                          AR41-GANDI
Billing Contact Name:                        CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Contact Organization:                Gandi SARL
Billing Contact Address1:                    38 rue Notre-Dame de Nazareth
Billing Contact City:                        Paris
Billing Contact Postal Code:                 75003
Billing Contact Country:                     France
Billing Contact Country Code:                FR
Billing Contact Email:                       support@gandi.net
Technical Contact ID:                        AR41-GANDI
Technical Contact Name:                      CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Technical Contact Organization:              Gandi SARL
Technical Contact Address1:                  38 rue Notre-Dame de Nazareth
Technical Contact City:                      Paris
Technical Contact Postal Code:               75003
Technical Contact Country:                   France
Technical Contact Country Code:              FR
Technical Contact Email:                     support@gandi.net
Name Server:                                 NS1.HAUFNA.BIZ
Name Server:                                 NS2.HAUFNA.BIZ
Name Server:                                 NS3.HAUFNA.BIZ
Name Server:                                 NS4.HAUFNA.BIZ
Name Server:                                 NS5.HAUFNA.BIZ
Created by Registrar:                        GANDI SARL
Last Updated by Registrar:                   GANDI SARL
Domain Registration Date:                    Tue Nov 07 10:49:46 GMT 2006
Domain Expiration Date:                      Tue Nov 06 23:59:59 GMT 2007
Domain Last Updated Date:                    Wed Nov 08 18:24:21 GMT 2006

>>>> Whois database was last updated on: Thu Nov 30 00:55:20 GMT 2006 <<<<

NS1.HAUFNA.BIZ - through to NS5. are being utilised so even though we are probably hitting china for Robert websites but these servers are throwing false paths to it every time interval of x seconds (that's my explanation to it) So its a bit like a proxy - you send a request to a person and it actions it. How much this is 'costing' Robert is something we don't know, somehow i doubt that nancy j wasiuk exists too.

Check down the last few days for the dns stuff to see this in action and Beergoggles tracker url. I suspect that the China is taking money from Bob for domain name registrations, and still hosting that website in multiple locations.

While a dynamic dns isn't 'evil' its not really necessary - except if have things to hide/obscure. As always the question is what is Robert trying to hide?

I don't like diluting the page, but the tactics have changed

Sky also writes (bbq time) Soloway's corporation (UBI 6024226472) no longer comes up on Washington state corporation database. So much for the "NPR Corporation" name, much less LLC protection. - added to about 'Robert' section too.

Domain owner friend who was 'wading' though 457 quarantined crap spams since last time they did it (they tell me that they pick an occasional random spam message from that folder - subject unknown and open it) and tells me they one of the few they opens they found one from his holyness. Its been added to the list. They also tell me that Robert is using spoofed headers and they now have an operation in Brazil which is news to all concerned. Such is life - i mean what are the odds that an random message in 457 will be a Robert Soloway spam (americans worried about 'gambling' laws should consider question a statistical probability issue) which is classed as statistics rather than a bet.

29 November Spamcop reports added - Thanks !. Some new logos - too make an appearance soon. Dns lookups as of Wed Nov 29 11:47:23 2006 gmt. emailadvertisinginc.com is interesting, Dns seems to have settled down from wacky monday. - I will start to document and append the upwards part of the document. Most of these appear to be Chinese ip address.

;; ANSWER SECTION:
theemailbroadcastingcompany.com. 33309 IN A     58.83.0.247
advertisingemailcorporation.com. 3600  IN A     211.155.132.206
permissionemailcorporation.com. 3600   IN A     211.155.132.206
broadcastmailingagency.com. 3600 IN       A     204.13.160.26

emailadvertisinginc.com. 180    IN      A       88.111.156.172
emailadvertisinginc.com. 180    IN      A       202.144.125.229
emailadvertisinginc.com. 180    IN      A       216.49.246.8
emailadvertisinginc.com. 180    IN      A       220.226.131.98
emailadvertisinginc.com. 180    IN      A       24.129.93.17
;; WHEN: Wed Nov 29 11:47:23 2006

ctandres.com.           300     IN      A       207.7.201.11
broadcastemailcompany.com. 3600 IN      A       204.13.161.124

ebroadcastcorporation.com. 86400 IN     CNAME   dpweb.vendaregroup.com.
dpweb.vendaregroup.com. 659     IN      A       72.5.175.90

broadcastemailcorporation.com. 3600 IN   A      221.10.254.97 
emailadvertisingcorporation.com. 1800 IN A      69.25.142.8

Rumour time now ? a link to Matt Ferris / Acetech USA rokso 6479 have partnered up for emailadvertisinginc.com ? (if you lookup the spamhaus record for Swiftco.net/Seattle).

broadcastmailingagency.com points to America

whois 204.13.160.26

OrgName:    Oversee.net
OrgID:      OVERS-1
Address:    818 W 7th Street
Address:    Suite 700
City:       Los Angeles
StateProv:  CA
PostalCode: 90017
Country:    US

NetRange:   204.13.160.0 - 204.13.163.255
CIDR:       204.13.160.0/22
NetName:    OVERSEE-NET-01
NetHandle:  NET-204-13-160-0-1
Parent:     NET-204-0-0-0-0
NetType:    Direct Assignment
NameServer: NS1.OVERSEE.NET
NameServer: NS2.OVERSEE.NET
Comment:
RegDate:    2005-04-21
Updated:    2005-04-21

RTechHandle: OVERS-ARIN
RTechName:   Oversee NOC
RTechPhone:  +1-213-408-0080
RTechEmail:  ipadmin@oversee.net

OrgTechHandle: OVERS-ARIN
OrgTechName:   Oversee NOC
OrgTechPhone:  +1-213-408-0080
OrgTechEmail:  ipadmin@oversee.net

# ARIN WHOIS database, last updated 2006-11-28 19:10

emailadvertisinginc.com points to England, India, America, India, America

whois 88.111.156.172
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '88.108.0.0 - 88.111.255.255'

inetnum:        88.108.0.0 - 88.111.255.255
netname:        DSL-TISCALI-UK
descr:          Tiscali UK Ltd
descr:          Milton Keynes
descr:          Dynamic DSL
descr:          ==========================================================
descr:          Concerning abuse and spam ... mailto: abuse@uk.tiscali.com
descr:          e-mail to other addresses will not be dealt with.
descr:          ==========================================================
country:        GB
admin-c:        TU935-RIPE
tech-c:         TU935-RIPE
status:         ASSIGNED PA
mnt-by:         TU935-RIPE-MNT
source:         RIPE # Filtered

role:           Tiscali UK
address:        Tiscali UK Limited
address:        20 Broadwick Street
address:        London W1F 8HT
phone:          +44 207 087 2000
remarks:        Information: http://www.tiscali.com
admin-c:        DC-RIPE
admin-c:        DG9105-RIPE
tech-c:         DC-RIPE
nic-hdl:        TU935-RIPE
remarks:        Hostmaster Role Account
mnt-by:         TU935-RIPE-MNT
source:         RIPE # Filtered
abuse-mailbox:  abuse@uk.tiscali.com

% Information related to '88.104.0.0/13AS9105'

route:          88.104.0.0/13
descr:          Tiscali UK Limited
origin:         AS9105
mnt-by:         TU935-RIPE-MNT
source:         RIPE # Filtered

whois 202.144.125.229
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      202.144.0.0 - 202.144.127.255
netname:      SILNET-AP
descr:        SIFY Ltd
descr:        Value Added Network service provider in India.
country:      IN
admin-c:      HS51-AP
tech-c:       HS51-AP
remarks:      ---------------------------------------------------------
remarks:      This object can only be modified by APNIC hostmaster
remarks:      If you wish to modify this object details please
remarks:      send email to hostmaster@apnic.net with your organisation
remarks:      account name in the subject line.
remarks:      ----------------------------------------------------------
mnt-by:       APNIC-HM
mnt-lower:    MAINT-IN-SIFY
mnt-routes:   MAINT-IN-SIFY
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040429
changed:      hm-changed@apnic.net 20040820
changed:      hm-changed@apnic.net 20060117
source:       APNIC

route:        202.144.0.0/17
descr:        Sify Ip address Space
country:      IN
origin:       AS24193
mnt-by:       MAINT-IN-SIFY
changed:      ipadmin@sifycorp.com 20040906
changed:      hm-changed@apnic.net 20060117
source:       APNIC

route:        202.144.0.0/17
descr:        Sify Ip address Space
country:      IN
origin:       AS9796
mnt-by:       MAINT-IN-SIFY
changed:      ipadmin@sifycorp.com 20040906
changed:      hm-changed@apnic.net 20060117
source:       APNIC

route:        202.144.0.0/17
descr:        Sify Ip address Space
country:      IN
origin:       AS9583
mnt-by:       MAINT-IN-SIFY
changed:      ipadmin@sifycorp.com 20040906
changed:      hm-changed@apnic.net 20060117
source:       APNIC

person:       Hostmaster Satyam Infoway
nic-hdl:      HS51-AP
e-mail:       ipadmin@sifycorp.com
address:      Sify Limited,
address:      Second Floor, Tidel Park,
address:      No.4,Canal Bank Road,
address:      Taramani, Chennai - 600113
phone:        +91-44-22540770
fax-no:       +91-44-22540771
country:      IN
changed:      ipadmin@sifycorp.com 20040818
mnt-by:       MAINT-IN-SIFY
changed:      hm-changed@apnic.net 20060117
source:       APNIC

whois 216.49.246.8

OrgName:    Craw-Kan Telephone Coop. Inc.
OrgID:      CKT
Address:    200 N Ozark
City:       Girard
StateProv:  KS
PostalCode: 66742
Country:    US

NetRange:   216.49.224.0 - 216.49.255.255
CIDR:       216.49.224.0/19
NetName:    CKTNET-BLK-1
NetHandle:  NET-216-49-224-0-1
Parent:     NET-216-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.CKT.NET
NameServer: NS2.CKT.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2000-06-07
Updated:    2002-07-26

RTechHandle: BS1438-ARIN
RTechName:   Short, Bruce
RTechPhone:  +1-316-724-8235
RTechEmail:  bruce@ckt.net

OrgTechHandle: BEM3-ARIN
OrgTechName:   McClendon, Bryan Eugene
OrgTechPhone:  +1-620-724-9810
OrgTechEmail:  bmcclen@ckt.net

# ARIN WHOIS database, last updated 2006-11-28 19:10

whois 220.226.131.98
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      220.224.0.0 - 220.227.255.255
netname:      RelianceInfocomm
descr:        Reliance Infocom Ltd
country:      IN
admin-c:      BN96-AP
tech-c:       SC1210-AP
tech-c:       CL1307-AP
status:       ALLOCATED PORTABLE
notify:       Antiabuse.support@Relianceinfo.com
mnt-by:       APNIC-HM
mnt-lower:    MAINT-IN-SN
changed:      hm-changed@apnic.net 20040301
changed:      hm-changed@apnic.net 20060208
changed:      hm-changed@apnic.net 20060404
source:       APNIC

route:        220.226.131.0/24
descr:        Reliance Infocom Ltd Internet Data Centre
origin:       AS18101
mnt-by:       MAINT-IN-SN
changed:      ip.nnoc@relianceinfo.com 20050916
source:       APNIC
country:      IN

person:       B Nagaraj
nic-hdl:      BN96-AP
remarks:      Send spam & abuse Reports
remarks:      include detailed information & time
remarks:      to antiabuse.support@relianceada.com
e-mail:       ricip.admin@relianceada.com
address:      Reliance Communication Ventures Ltd,
address:      2CA 13 , D Block , 2nd Floor,
address:      Dhirubai Ambani Knowledge City,
address:      Thane Belapur Road, KoparKhairne,
address:      Navi Mumbai - 400710 , INDIA.
phone:        +91-22-30383796
fax-no:       +91-22-30383899
country:      IN
changed:      ricip.admin@relianceada.com 20061107
mnt-by:       MAINT-IN-SN
source:       APNIC

person:       Shankha Chaudhuri
nic-hdl:      SC1210-AP
remarks:      Send spam & abuse Reports
remarks:      include detailed information & time
remarks:      to antiabuse.support@relianceada.com
e-mail:       ricip.admin@relianceada.com
address:      Reliance Communication Ventures Ltd,
address:      2W14 , DB 17 , D Block , 2nd Floor,
address:      Dhirubai Ambani Knowledge City,
address:      Thane Belapur Road, KoparKhairne,
address:      Navi Mumbai - 400710 , INDIA.
phone:        +91-22-30383936
fax-no:       +91-22-30383899
country:      IN
changed:      ricip.admin@relianceada.com 20060613
mnt-by:       MAINT-IN-SN
source:       APNIC

person:       Cavin Lobo
nic-hdl:      CL1307-AP
remarks:      Send spam & abuse Reports
remarks:      include detailed information & time
remarks:      to antiabuse.support@relianceada.com
e-mail:       ricip.admin@relianceada.com
address:      Reliance Communication Ventures Ltd,
address:      3W24, Block-D,
address:      DAKC, Kopar khairne,
address:      Navi Mumbai 400 709
phone:        +91-22-30383851
fax-no:       +91-22-30383899
country:      IN
changed:      ricip.admin@relianceada.com 20060613
mnt-by:       MAINT-IN-SN
source:       APNIC

And Jacksonville America

whois 24.129.93.17
Comcast Cable Communications Holdings, Inc CCCH3-21 (NET-24-129-0-0-1)
                                  24.129.0.0 - 24.129.127.255
Comcast Cable Communications Holdings, Inc. JACKSONVILLE-1 (NET-24-129-0-0-2)
                                  24.129.0.0 - 24.129.127.255

ctandres.com disputed still (dns games mean the plots been slightly lost) broadcastemailcompany.com points here seems dormant

OrgName:    Oversee.net
OrgID:      OVERS-1
Address:    818 W 7th Street
Address:    Suite 700
City:       Los Angeles
StateProv:  CA
PostalCode: 90017
Country:    US

NetRange:   204.13.160.0 - 204.13.163.255
CIDR:       204.13.160.0/22
NetName:    OVERSEE-NET-01
NetHandle:  NET-204-13-160-0-1
Parent:     NET-204-0-0-0-0
NetType:    Direct Assignment
NameServer: NS1.OVERSEE.NET
NameServer: NS2.OVERSEE.NET
Comment:
RegDate:    2005-04-21
Updated:    2005-04-21

RTechHandle: OVERS-ARIN
RTechName:   Oversee NOC
RTechPhone:  +1-213-408-0080
RTechEmail:  ipadmin@oversee.net

OrgTechHandle: OVERS-ARIN
OrgTechName:   Oversee NOC
OrgTechPhone:  +1-213-408-0080
OrgTechEmail:  ipadmin@oversee.net

Some muppet has linked ebroadcastcorporation.com. to *here 1 day refresh) dpweb.vendaregroup.com 72.5.175.90 which links here http://4internetradios.com/?rid=1446547 odd. broadcastemailcorporation.com hits

whois 221.10.254.97
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

emailadvertisingcorporation.com hits ? bogon ? seems dormant.

whois 69.25.142.8
Internap Network Services PNAP-12-2002 (NET-69-25-0-0-1)
                                  69.25.0.0 - 69.25.255.255
eNom INAP-SEF-ENOM-1761 (NET-69-25-142-0-1)
                                  69.25.142.0 - 69.25.142.63

Ed mails me to say the fan club of ctandres.com / broadcastemailcompany.com / ebroadcastcorporation and emailadvertisingcorporation.com have been taken over by persons/companies with a strange mental illness. Once a domain name has bob website on it its then got a history imho. The dubious nature of these can be discovered quite easily.

I'd also like to remind you all that although i have many Bob domain names listed here - none of them actually hit a Robert Soloway website. OK boys and girls that concludes.

28 November Spamcop reports added, Bobs recent activity indicates to me why Bob seemed 'quiet' earlier on in the month was his preparation and my inability to get to any of his websites yesterday however proves that while such fun and games might possible, my ability (and the dns - name resolution how many of you go to 72.14.207.99) to track his websites becomes pointless since that website advertising bobs spam offering is not there since it's moved then that's a pointless 'game'.

Anyhow over at Opsan (sky) reports of splog spammming too. Fresh batch alledges a 75% price hike in the spam email 'product' (?to pay for fun and games of above?) and the games continued after i called it yesterday (sky says) emailadvertisinginc.com -CHANGED - now on a USA server - SBglobal.net! 210.214.109.145 Full IP list 62.121.124.223, 68.250.195.150, 71.129.206.36, 200.42.234.6,210.214.109.145

broadcastemailinc.com - still down, emailadvertisinginc.com - UP - Domain shows 62.121.124.223,68.250.195.150,71.129.206.36,200.42.234.6,210.214.109.145 and Emailadvertisinginc just changed again. Now 86.8.133.169, a refresh of the whois then shows 213.22.137.7, then 88.111.145.141, then 69.183.41.74, 88.111.145.141, and 69.47.55.16

See yesterdays 'nerdy section' for the dns explanation. Thank you for the extra spamcop reports. Say 'hi' to american spammer hosting.

www.emailadvertisinginc.com (checking ip) = 69.183.41.74
    host 69.183.41.74 (getting name) no name
    Cached whois for 69.183.41.74 : abuse@sbcglobal.net

admin note: collecting private statistics now.

27 November More spamcop reports added at the right section area. Thanks again.

Ed tells me (note opsan down ?dns bug?) that lots of things are not working. emailadvertisinginc.com - down (no dns), broadcastemailinc.com down (no dns) theemailbroadcastingcompany.com might have changed but im not reporting 58.83.0.247 (china) which Ed does but still the old address (still in china) i listed below. - some outside issue here confirmed by dnsreport = Ed right. Time to unleash the Pandas. optinemailcorp points here too

canonical name  	theemailbroadcastingcompany.com.
aliases         	
addresses       	58.83.0.247

whois 58.83.0.247
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      58.83.0.0 - 58.83.3.255
netname:      yzgzynetwork---cn
descr:        Yongzhou City Guangzhiyuan Technology Development Co., LTD
descr:        Room 201, Hedong Businesstown, Lengshuitan, Yongzhou City, Hunan Province, China.
country:      CN
admin-c:      HW542-AP
tech-c:       HW542-AP
status:       ALLOCATED NON-PORTABLE
mnt-by:       MAINT-CN-GUANGZHIYUAN
mnt-routes:   MAINT-CNCGROUP-RR
changed:      abuse@86ad.com  20060626
remarks:      please send spam reports to abuse@86ad.com
notify:       cs@86ad.com
source:       APNIC

person:       Hanbo Wang
nic-hdl:      HW542-AP
e-mail:       cs@86ad.com
address:      Yongzhou city Guangzhiyuan Technology Co., LTD.
address:      Room 201, Hedong Businesstown, Lengshuitan, Yongzhou City, Hunan Province, China.
phone:        +86-746-8328995
fax-no:       +86-746-8328995
country:      CN
changed:      bluesky_bluesky@163.com 20060804
mnt-by:       MAINT-NEW
source:       APNIC

Its going to get a bit nerdy here (you may wish to skip)

Generated by www.DNSreport.com at 12:37:58 GMT on 27 Nov 2006.
Category	Status	Test Name	Information
INFO	NS records at parent servers	Your NS records at the parent servers are:

ns1.optinemailcorp.com. [221.194.111.55] [TTL=172800] [CN]
ns2.optinemailcorp.com. [58.83.0.247] [TTL=172800] [CN]

Mismatched glue	ERROR: Your nameservers report glue that is different from what the parent servers report. This will cause DNS servers to get confused; some may go to the IP provided by the parent servers, while others may get to the ones provided by your authoritative DNS servers. Problem record(s) are:

ns1.optinemailcorp.com.:
Parent server (g.gtld-servers.net) says A record is 221.194.111.55, but
authoritative DNS server (221.194.111.55) says it is 125.208.6.59
ns2.optinemailcorp.com.:
Parent server (g.gtld-servers.net) says A record is 58.83.0.247, but
authoritative DNS server (221.194.111.55) says it is 60.200.228.41

That means that depending on upon where you be you get different results (examples) from generated here and here (results will change) so take two countries.

Israel: Barak 013 #1         TIMEOUT
Israel: Barak 013 #2         [No cached answer: Would go to NS of com.] 
Israel: Barak 013 #3         A=58.83.0.247 [TTL=19h 37m 33s] 

US: Sprynet #1               [No cached answer: Would go to NS of (root)] 
US: Sprynet #2               [No cached answer: Would go to NS of (root)] 
US: Sprynet #1               A=221.194.111.55 [TTL=2h 2m 13s]

re: dnsreport.com/tools/dnsreport.ch?domain=emailadvertisinginc.com:-

NS records at the parent servers are:

ns1.haufna.biz. [213.138.228.130 (NO GLUE)] [PT]
ns2.haufna.biz. [213.138.228.130 (NO GLUE)] [PT]
ns3.haufna.biz. [212.10.46.189 (NO GLUE)] [DK]
ns4.haufna.biz. [131.114.250.77 (NO GLUE)] [EU]

Seems like Soloway 'fun' with the botnetted ns's as per nanae & nanas refs:- haufna.biz that seems to share similar characteristics to yourherballife.info See Rev Beergoggles post (google) (http://tinyurl.com/ybnbl5)

Well Thats it so far. my dns servers are borked (broken) when tracking this shit. Im assuming emailadvertisinginc.com is up. In discussing Chinas views of things this made me laugh the Chinesse cannot read it since the bbc is considered 'bad' and thus 'censored'. It deals with the Chinese Olympic bid, and when some english politicians (that's Ken and Seb) went for a field trip for some tips. I quote i think is in order.

"For about 20 minutes the Chinese side impressed their guests with slick presentations, and a deluge of facts and figures; everything from the number of trees being planted, to the treatment of Olympic sewage. The presentation complete, the group of Chinese officials sat back smiling, confident that the foreigners had been suitably impressed. But Ken and Seb clearly hadn't read the script. A look of panic came over the officials faces. Why were these foreigners asking questions? Hadn't they been listening to the carefully prepared presentation? For a few minutes the officials floundered and waffled, before the meeting was brought to a swift close. For Seb and Ken it was lesson number one in Chinese bureaucrat-dom, official information is there to be consumed, not questioned."

When you replace Olympics with the Word Spam it becomes funny. The moral - don't ask the chinese panda's questions.

26 November The christian god might have taken sunday off, but Robert Soloway does not. So what could best be described as 'hyper' activity optinemailcorp.com (new coming up?), emailadvertisinginc.com (seen before), advertisingemailcorporation.com (seen before), and theemailbroadcastingcompany.com (new). Hey you all know what follows, Pandas have been fed and are ready to go do there stuff - go pandas go!

registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.DNS.COM.CN
   Name Server: NS1.DNS.COM.CN
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 17-Nov-2006
   Creation Date: 17-Nov-2006
   Expiration Date: 17-Nov-2007

>>> Last update of whois database: Sun, 26 Nov 2006 09:40:24 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

  Domain Name.......... optinemailcorp.com
  Creation Date........ 2006-11-17 21:42:59
  Registration Date.... 2006-11-17 21:42:59
  Expiry Date.......... 2007-11-17 21:42:59
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou
  Bill Address......... 321000
  Bill Address......... GD
  Bill Address......... CN
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  no dns yet

Remember ?

dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40779
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 3600   IN      A       211.155.132.206

;; AUTHORITY SECTION:

;; Query time: 3601 msec
;; SERVER: ?#53()
;; WHEN: Sun Nov 26 14:55:53 2006
;; MSG SIZE  rcvd: 281

whois 211.155.132.206
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

Now advertisingemailcorporation.com

dig advertisingemailcorporation.com

<<>> DiG 9.2.4 <<>> advertisingemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53317
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;advertisingemailcorporation.com. IN    A

;; ANSWER SECTION:
advertisingemailcorporation.com. 3600 IN A      211.155.132.206
;; Query time: 2612 msec
;; SERVER: #53()
;; WHEN: Sun Nov 26 15:02:52 2006
;; MSG SIZE  rcvd: 289

whois 211.155.132.206
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

Finally (ive got exhuasted spamming pandas here. Least theres plenty of spam in Beijung again So lets meet theemailbroadcastingcompany.com appears new

whois theemailbroadcastingcompany.com

Whois Server Version 2.0
   Domain Name: THEEMAILBROADCASTINGCOMPANY.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.OPTINEMAILCORP.COM
   Name Server: NS1.OPTINEMAILCORP.COM
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 24-Nov-2006
   Creation Date: 17-Nov-2006
   Expiration Date: 17-Nov-2007

>>> Last update of whois database: Sun, 26 Nov 2006 10:11:24 EST <<<

Domain Name.......... theemailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:48
  Registration Date.... 2006-11-17 21:42:48
  Expiry Date.......... 2007-11-17 21:42:48
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou
  Bill Address......... 321000
  Bill Address......... GD
  Bill Address......... CN
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns2.optinemailcorp.com
  Name Server.......... ns1.optinemailcorp.com
  
  dig theemailbroadcastingcompany.com

; <<>> DiG 9.2.4 <<>> theemailbroadcastingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56265
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;theemailbroadcastingcompany.com. IN    A

;; ANSWER SECTION:
theemailbroadcastingcompany.com. 86076 IN A     221.194.111.55
;; Query time: 3 msec
;; SERVER: #53()
;; WHEN: Sun Nov 26 15:13:29 2006
;; MSG SIZE  rcvd: 289

whois 221.194.111.55
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN

whoopie China - full house !!!

Send bamboo leaves and spam now. Thanks for your cc on spamcop reports too added to right section. Credit to the usual gang at Opsan. Anybody here do exorcism's?

24 November admin note: I am trying a different approach to the spamcop reports. comments, views ?. Ok Chinese Pandas at the ready so lets all go remember newportcorp.cn (credit ed)

Lets say China hosting shall we ?

无法找到网页
您正在搜索的网页可能已经删除、更名或暂时不可用。

请尝试下列操作：

    * 如果您在“地址”栏中键入了网页地址，请检查其拼写是否正确。
    * 打开 www.newportcorp.cn 主页，寻找指向所需信息的链接。
    * 单击后退按钮尝试其他链接。

HTTP 404 - 无法找到文件
Internet 信息服务

技术信息（支持个人）

    * 详细信息：
      Microsoft 支持
            
      Dns says fun and games: www.newportcorp.cn. CNAME linuxroot2006.kmip.net. [TTL=10800]
      
      dig linuxroot2006.kmip.net

; <<>> DiG 9.2.4 <<>> linuxroot2006.kmip.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9876
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;linuxroot2006.kmip.net.                IN      A

;; ANSWER SECTION:
linuxroot2006.kmip.net. 60      IN      A       222.182.118.206

;; WHEN: Fri Nov 24 15:24:47 2006

which is woohooo !!!

whois 222.182.118.206
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      222.176.0.0 - 222.183.255.255
netname:      CHINANET-CQ
descr:        CHINANET Chongqing  province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       CQ235-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CHINANET-CQ
mnt-routes:   MAINT-CHINANET-CQ
changed:      hm-changed@apnic.net 20040203
remarks:      This object can only be changed by APNIC Hostmaster
status:       ALLOCATED PORTABLE
source:       APNIC

role:         CHINANET CQ
address:      The mainstreet 3 daping ,chongqing data communication bureau
country:      CN
phone:        +862368614888
fax-no:       +862368602314
e-mail:       abuse@cta.cq.cn
trouble:      send spam reports to abuse@cta.cq.cn
trouble:      and abuse reports to abuse@cta.cq.cn
admin-c:      ZL235-AP
tech-c:       ZL235-AP
nic-hdl:      CQ235-AP
remarks:      http://www.cta.cq.cn
notify:       abuse@cta.cq.cn
mnt-by:       MAINT-CHINANET-CQ
changed:      abuse@cta.cq.cn 20030917
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      lqing@chinatelecom.com.cn 20051212
mnt-by:       MAINT-CHINANET
source:       APNIC

the 'I hate spam not' department in Chinanet told you those antispam conferences are great didn't I. Ed also reports advertisingemailcorporation.com and emailadvertisinginc.com have lost there dns.

23 November There i was thinking its wednesday and nothing happens and then it does. Ed (welcome back) reports to Opsan that one old one up, three down, and then also the first one down. and then ... (rather large entry today) so Details below start with the old domain just up and seen before here.

whois newportcorp.cn
Domain Name: newportcorp.cn
ROID: 20060330s10001s47212991-cn
Domain Status: ok
Registrant Organization: 第二域名
Registrant Name: 胡兵
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: 北京万网志成科技有限公司
Name Server:dns9.hichina.com
Name Server:dns10.hichina.com
Registration Date: 2006-03-30 11:21
Expiration Date: 2007-03-30 11:21

no dns we assume chinese hosting either at Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd and CNCGROUP Hebei province network shutdown time one day it seems. Hosts of: broadcastemailingagency.com, permissionemailcorporation.com and emailadvertisenow.com appear down. Those of you seeking get rich quick (without working) should take a look at Odono and Transfergate Thats not exactly an area of expertise for me (seek ace) but there's an 'inferred' link that Mr Soloway might have something to do with those two schemes of dubiousness. Go make up your own mind as to Robert association with the two schemes. Americans are reminded that you can ring his toll free phone number on on 1-888-340-9733 and then apparently press 10

Right back to what i do best - that leaves emailadvertisinginc.com up guess where to ? Go Chinese olympic pandas!

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086

Spam still available in Beijing, god bless chairman mao. Ed also spots advertisingemailcorporation.com , note new masthead for website. Love the zombies Bob (that pose is just ..). Technical garbage follows.

whois advertisingemailcorporation.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: ADVERTISINGEMAILCORPORATION.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.ADVERTISINGEMAILCORPORATION.COM
   Name Server: NS3.ADVERTISINGEMAILCORPORATION.COM
   Name Server: NS2.ADVERTISINGEMAILCORPORATION.COM
   Name Server: NS1.ADVERTISINGEMAILCORPORATION.COM
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 22-Nov-2006
   Creation Date: 17-Nov-2006
   Expiration Date: 17-Nov-2007

>>> Last update of whois database: Thu, 23 Nov 2006 09:49:44 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

Domain Name.......... advertisingemailcorporation.com
  Creation Date........ 2006-11-17 21:43:14
  Registration Date.... 2006-11-17 21:43:14
  Expiry Date.......... 2007-11-17 21:43:14
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232
  
Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou
  Bill Address......... 321000
  Bill Address......... GD
  Bill Address......... CN
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.advertisingemailcorporation.com
  Name Server.......... ns3.advertisingemailcorporation.com
  Name Server.......... ns2.advertisingemailcorporation.com
  Name Server.......... ns1.advertisingemailcorporation.com

; <<>> DiG 9.2.4 <<>> advertisingemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12000
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 2

;; QUESTION SECTION:
;advertisingemailcorporation.com. IN    A

;; ANSWER SECTION:
advertisingemailcorporation.com. 3600 IN A      211.155.132.229

;; AUTHORITY SECTION:
com.                    159831  IN      NS      L.GTLD-SERVERS.NET.
com.                    159831  IN      NS      M.GTLD-SERVERS.NET.
com.                    159831  IN      NS      A.GTLD-SERVERS.NET.
com.                    159831  IN      NS      B.GTLD-SERVERS.NET.
com.                    159831  IN      NS      C.GTLD-SERVERS.NET.
com.                    159831  IN      NS      D.GTLD-SERVERS.NET.
com.                    159831  IN      NS      E.GTLD-SERVERS.NET.
com.                    159831  IN      NS      F.GTLD-SERVERS.NET.
com.                    159831  IN      NS      G.GTLD-SERVERS.NET.
com.                    159831  IN      NS      H.GTLD-SERVERS.NET.
com.                    159831  IN      NS      I.GTLD-SERVERS.NET.
com.                    159831  IN      NS      J.GTLD-SERVERS.NET.
com.                    159831  IN      NS      K.GTLD-SERVERS.NET.

;; ADDITIONAL SECTION:
E.GTLD-SERVERS.NET.     159831  IN      A       192.12.94.30
M.GTLD-SERVERS.NET.     159830  IN      A       192.55.83.30

;; Query time: 583 msec
;; SERVER: #53()
;; WHEN: Thu Nov 23 14:50:11 2006
;; MSG SIZE  rcvd: 321

whois 211.155.132.229
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

rumour time dynamicpipe.com (canada?) is dead hoster ? according spamcop notes ? Thanks for spamcop reports.

22 November 2006: one new spamcop report added Bob slightly changes "his" message

email advertise like "this" to 8,000,000 people... 

Could "this" (in the context of an unwanted email) be deemed as unwanted and untargeted spam?. Send your "answers" to the usual place.

Some humour now: q: whats the best meeting to go to ? a: the China Anti Spam summit of 2006, why that meeting should take all of a minute, imagine

chair: welcome

Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd: we hate spammers

CNCGROUP Hebei province network: so do we

everybody else: ok

chair: that concludes our business, now who wants to see some tourist sights
now.

20 November 2006: Monday - boring ? not here - Two domains up, one emailadvertisenow.com is new and broadcastemailingagency.com makes an reappearance. Two new spamcop reports

Spamcop comments say Italy dumped Bob, which one is not clear. [Note added by 80.204.90.91 (host91-90-static.204-80-b.business.telecomitalia.it)] Time to get the Chinese Panda out ?. 1,2,3 Pandas ready and standard technical garbage follows.

   Domain Name: EMAILADVERTISENOW.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.DNS.COM.CN
   Name Server: NS1.DNS.COM.CN
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 15-Sep-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Mon, 20 Nov 2006 12:10:15 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

Domain Name.......... emailadvertisenow.com
  Creation Date........ 2006-09-12 22:42:37
  Registration Date.... 2006-09-12 22:42:37
  Expiry Date.......... 2007-09-12 22:42:37
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  where ?
  
  dig emailadvertisenow.com

; <<>> DiG 9.2.4 <<>> emailadvertisenow.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39507
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 3

;; QUESTION SECTION:
;emailadvertisenow.com.         IN      A

;; ANSWER SECTION:
emailadvertisenow.com.  3600    IN      A       218.11.17.231

;; Query time: 401 msec
;; SERVER: ?#53(?)
;; WHEN: Mon Nov 20 17:13:02 2006

That be ....

whois 218.11.17.231
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      218.11.0.0 - 218.12.255.255
netname:      CNCGROUP-HE
country:      CN
descr:        CNCGROUP Hebei province network
admin-c:      CH455-AP
tech-c:       JL2284-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      abuse@cnc-noc.net 20031217
changed:      hm-changed@apnic.net 20040105
changed:      hm-changed@apnic.net 20040105
changed:      hm-changed@apnic.net 20040927
changed:      hm-changed@apnic.net 20050511
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        218.11.0.0/16
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

China.                    
  

Lest we not forget

whois broadcastemailingagency.com

   Domain Name: BROADCASTEMAILINGAGENCY.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.PERMISSIONEMAILCORPORATION.COM
   Name Server: NS3.PERMISSIONEMAILCORPORATION.COM
   Name Server: NS2.PERMISSIONEMAILCORPORATION.COM
   Name Server: NS1.PERMISSIONEMAILCORPORATION.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 18-Nov-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Mon, 20 Nov 2006 12:17:41 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

Domain Name.......... broadcastemailingagency.com
  Creation Date........ 2006-09-12 22:42:22
  Registration Date.... 2006-09-12 22:42:22
  Expiry Date.......... 2007-09-12 22:42:22
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.permissionemailcorporation.com
  Name Server.......... ns3.permissionemailcorporation.com
  Name Server.......... ns2.permissionemailcorporation.com
  Name Server.......... ns1.permissionemailcorporation.com
  
  hmm that's 
  
   dig broadcastemailingagency.com

; <<>> DiG 9.2.4 <<>> broadcastemailingagency.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35937
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 3

;; QUESTION SECTION:
;broadcastemailingagency.com.   IN      A

;; ANSWER SECTION:
broadcastemailingagency.com. 3600 IN    A       211.155.132.226

;; Query time: 388 msec
;; WHEN: Mon Nov 20 17:19:37 2006
;; MSG SIZE  rcvd: 333


Whoopie !!! 


whois  211.155.132.226

% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Spam free China!!!

19 November 2006: Thank you for spamcop reports!, as predicted permissionemailcorporation.com and emailadvertisinginc.com are up seen by our friend freshbatch and sky confirms surprisingly both being hosted in China in beautiful downtown 'spam free' Beijing.

Being bored one sunday I found this from http://ww2.howmanyofme.com/search/ (click on logo to search)

* There are 630 people in the U.S. with the last name Soloway.
* Statistically the 41520th most popular last name. (tied with 3253 other last names)

(poor sods) and

HowManyOfMe.com
	There are: 10 people with the name Robert Soloway in the U.S.A.

Standard technical garbage follows (china).

dig permissionemailcorporation.com

; <<>> DiG 9.2.4 <<>> permissionemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10376
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 1

;; QUESTION SECTION:
;permissionemailcorporation.com.        IN      A

;; ANSWER SECTION:
permissionemailcorporation.com. 3600 IN A       211.155.132.226

;; AUTHORITY SECTION:

;; Query time: 713 msec
;; SERVER: #53()
;; WHEN: Sun Nov 19 12:31:11 2006
;; MSG SIZE  rcvd: 304

dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50290
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 1

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 3600   IN      A       211.155.132.226
...

China naturally been here before

whois 211.155.132.226
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Wikipedia might be evil in China, but thank goodness Spam is communist and thus good. Enjoy. Page size updated. This will be my icon for China now on. Who said the olympics (which china will host) was for drug taking athletes only ?. The Panda is perfect. Thanks China!

18 November 2006: OK Boys and Girls - friend informs me that Soloway is spamming with dead domain in so is emailadvertisinginc.com going up again?. He was using a res.rr.com address (american dsl) to send his spam.

Now what does Yahoo answers think of Soloway http://answers.yahoo.com/question/index?qid=20061008121843AAxLeXU and Sky also writes to tell that permissionemailcorporation.com american host is down.

17 November 2006: News about the broadcast spam package. I reloaded the disk into a a cd-rw drive (rather than a normal cd-r) the burner application is identified as 'CDPROLIB' which bashing that into google seems to indicate its part of a Nero package using microsoft windows.

I also seem to have a better copy of the data by using a cd-rw drive than cd-r don't ask me why. Generally i'd assume that is end user incompetence but i don't use nero to burn cd's. So make your own views on the subject or Americans might like to ring his free to toll free number (thanks to sky) on 1-888-340-9733 and then press 10 and ask him why.

Sky reports permissionemailcorporation.com, and emailadvertisnginc.com down

Domain Name.......... permissionemailcorporation.com
  Creation Date........ 2006-09-12 22:42:30
  Registration Date.... 2006-09-12 22:42:30
  Expiry Date.......... 2007-09-12 22:42:30
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  dig permissionemailcorporation.com

; <<>> DiG 9.2.4 <<>> permissionemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38051
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 3

;; QUESTION SECTION:
;permissionemailcorporation.com.        IN      A

;; ANSWER SECTION:
permissionemailcorporation.com. 3252 IN A       205.209.141.50

;; AUTHORITY SECTION:
com.                    30752   IN      NS      G.GTLD-SERVERS.NET.
com.                    30752   IN      NS      H.GTLD-SERVERS.NET.
com.                    30752   IN      NS      I.GTLD-SERVERS.NET.
com.                    30752   IN      NS      J.GTLD-SERVERS.NET.
com.                    30752   IN      NS      K.GTLD-SERVERS.NET.
com.                    30752   IN      NS      L.GTLD-SERVERS.NET.
com.                    30752   IN      NS      M.GTLD-SERVERS.NET.
com.                    30752   IN      NS      A.GTLD-SERVERS.NET.
com.                    30752   IN      NS      B.GTLD-SERVERS.NET.
com.                    30752   IN      NS      C.GTLD-SERVERS.NET.
com.                    30752   IN      NS      D.GTLD-SERVERS.NET.
com.                    30752   IN      NS      E.GTLD-SERVERS.NET.
com.                    30752   IN      NS      F.GTLD-SERVERS.NET.

;; ADDITIONAL SECTION:
E.GTLD-SERVERS.NET.     30752   IN      A       192.12.94.30
K.GTLD-SERVERS.NET.     30752   IN      A       192.52.178.30
M.GTLD-SERVERS.NET.     30752   IN      A       192.55.83.30

;; Query time: 123 msec
;; SERVER: ??#53(??)
;; WHEN: Fri Nov 17 12:37:42 2006
;; MSG SIZE  rcvd: 336

whois 205.209.141.50

OrgName:    Managed Solutions Group, Inc.
OrgID:      MSG-48
Address:    46750 Fremont Blvd.
Address:    #107
City:       Fremont
StateProv:  CA
PostalCode: 94538
Country:    US

ReferralServer: rwhois://rwhois.managedsg-inc.com:4321

NetRange:   205.209.128.0 - 205.209.191.255
CIDR:       205.209.128.0/18
NetName:    NET-MANAGED
NetHandle:  NET-205-209-128-0-1
Parent:     NET-205-0-0-0-0
NetType:    Direct Allocation
NameServer: RDNS1.MANAGEDSG-INC.COM
NameServer: RDNS2.MANAGEDSG-INC.COM
Comment:
RegDate:    2004-04-15
Updated:    2006-03-17

RAbuseHandle: ABUSE429-ARIN
RAbuseName:   MSG Inc Abuse
RAbusePhone:  +1-888-585-8889
RAbuseEmail:  abuse@managedsg-inc.com

RTechHandle: MAT48-ARIN
RTechName:   MSG Arin Tech
RTechPhone:  +1-888-585-8889
RTechEmail:  tech@managedsg-inc.com

OrgAbuseHandle: ABUSE429-ARIN
OrgAbuseName:   MSG Inc Abuse
OrgAbusePhone:  +1-888-585-8889
OrgAbuseEmail:  abuse@managedsg-inc.com

OrgTechHandle: MAT48-ARIN
OrgTechName:   MSG Arin Tech
OrgTechPhone:  +1-888-585-8889
OrgTechEmail:  tech@managedsg-inc.com

# ARIN WHOIS database, last updated 2006-11-16 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.


Found a referral to rwhois.managedsg-inc.com:4321.

%rwhois V-1.5:003eff:00 rwhoisd (by Network Solutions, Inc. V-1.5.9.5)
network:Auth-Area:205.209.128.0/18
network:Class-Name:network
network:Network-Name:NET-MSG
network:IP-Network:205.209.141.50/30
network:IP-Network-Block:205.209.141.50-53
network:Organization-Name:SN.com
network:Organization-City:Brighton
network:Organization-State:East Sussex
network:Organization-Zip:19
network:Organization-Country:UK
network:Description-Usage:customer
network:Created:20061115
network:Updated:20061115
network:Updated-By:abuse@managedsg-inc.com

%ok

Wow hosting in america - Bob Soloway found some fucked up americans. broadcastemailingagency.com non resolving.

Mistyping 'broadcastmailingagency.com' comes up with this with adverts for drivercleaner.com (spambot loader ?) and other advertsing crap

Domain Name:                 broadcastmailingagency.com
Registrant
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Admin Contact
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Billing Contact
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Tech Contact
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Creation Date:               10/13/06
Expiration Date:             10/13/07
Domain Status:               ACTIVE


Domain Servers

  ns2.maltuzi.com
  ns22.maltuzi.com

Registration Provided By:    NAME KING INC.
Contact:                     info@nameking.com
Abuse Desk Email Address:    abuse@nameking.com

Request 1/20
Hosted in America

More dumb american people.

15 November 2006: Domain owner friend fishes spam out of the spam box and sends it on here. Mr Soloway is spamming from Germany on this occurrence, and spoofing a return email address that the domain being spammed does not have 'feedback@ tld'. how Robert can you get.

14 November 2006: Thank you for the spam cop report.

8 November 2006: Added spamcop report (thank you !) more wanted please and '+' '-' page font changing feature. Apologies but it is rather boring at present here.

25 October 2006: Thank you for the spamcop reports added to this page Spamming via Egypt,Spain, and America our Mr Soloway gets around don't he.

Sky archived this too Soloway 'get lost' legal response that's enough of that I think.

23 October 2006: Lets discuss 'karma' or what goes around comes around Robert Soloway style.

Report wrong doing to the Washington State Attorney Generals office: http://www.atg.wa.gov/ Bananas says hello to the incumbent Rob McKenna, who was elected in 2004 to a four-year term. He seems to 'like' Mr Soloway.

18 October 2006: Meet and email Bob's spammy state representatives of washington state (credit Sky) chopp.frank@leg.wa.gov murray.edward@leg.wa.gov thibaudeau.pat@leg.wa.gov I think they deserve some spam don't you ?, some of you might wish to unsubscribe them from Bobs spam business 'confirm you want spam' webpage. That's fair isn't it ?

16 October: Jake at Opsan spots this thebroadcastemailcorp@mailshack.com email address after opting out. Might as well give it a mention here.

Bob appears to be Viagra'ing, probably explains the lack of activity in this part of his 'opt-in' one man broadcastemail empire. Since i don't cover that area of Soloway.

minserf.com dead,emailadvertisinginc.com up

12 October: Sky reports broadcastemailingagency.com

Domain Name: BROADCASTEMAILINGAGENCY.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.BROADCASTEMAILINGAGENCY.COM
   Name Server: NS3.BROADCASTEMAILINGAGENCY.COM
   Name Server: NS2.BROADCASTEMAILINGAGENCY.COM
   Name Server: NS1.BROADCASTEMAILINGAGENCY.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 10-Oct-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Thu, 12 Oct 2006 10:58:24 EDT <<<

Domain Name.......... broadcastemailingagency.com
  Creation Date........ 2006-09-12 22:42:22
  Registration Date.... 2006-09-12 22:42:22
  Expiry Date.......... 2007-09-12 22:42:22
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.broadcastemailingagency.com
  Name Server.......... ns3.broadcastemailingagency.com
  Name Server.......... ns2.broadcastemailingagency.com
  Name Server.......... ns1.broadcastemailingagency.com
  
  ; <<<>> DiG 9.2.4 ;<<>> broadcastemailingagency.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER;<<- opcode: QUERY, status: NOERROR, id: 24365
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailingagency.com.   IN      A

;; ANSWER SECTION:
broadcastemailingagency.com. 3600 IN    A       211.155.132.6

;; AUTHORITY SECTION:
broadcastemailingagency.com. 2837 IN    NS      ns4.broadcastemailingagency.com.
broadcastemailingagency.com. 2837 IN    NS      ns1.broadcastemailingagency.com.
broadcastemailingagency.com. 2837 IN    NS      ns2.broadcastemailingagency.com.
broadcastemailingagency.com. 2837 IN    NS      ns3.broadcastemailingagency.com.

;; Query time: 617 msec
;; SERVER: 
;; WHEN: Thu Oct 12 16:00:08 2006
;; MSG SIZE  rcvd: 133

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

China fancy that and broadcastadvertisenow.com

   Domain Name: BROADCASTADVERTISENOW.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.DNS.COM.CN
   Name Server: NS1.DNS.COM.CN
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 15-Sep-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Thu, 12 Oct 2006 11:02:48 EDT <<<

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... broadcastadvertisenow.com
  Creation Date........ 2006-09-12 22:42:41
  Registration Date.... 2006-09-12 22:42:41
  Expiry Date.......... 2007-09-12 22:42:41
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  ; <<>> DiG 9.2.4 <<>> broadcastadvertisenow.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1152
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastadvertisenow.com.     IN      A

;; AUTHORITY SECTION:
broadcastadvertisenow.com. 3594 IN      SOA     ns2.dns.com.cn. root.ns2.dns.com.cn. 2006091222 3600 3600 68400 180

;; Query time: 2 msec
;; SERVER: ?#53(?)
;; WHEN: Thu Oct 12 16:05:39 2006
;; MSG SIZE  rcvd: 98

no home - lets assume it was China

10 October: did dot did dip... news update emailadvertisinginc.com and colidsilver.com have no dns. It appears that nobody is home in Bob Soloway land. Take a look at this (bbc).

1 October:ctandres.com in limbo colidliver.com, colidsilver.com no dns

This domain has been disputed!  This domain name was registered through DomainsNow4U.com

ctandres.com

No dns for.

dig colidsilver.com

; <<>> DiG 9.2.4 <<>> colidsilver.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;colidsilver.com.               IN      A

;; AUTHORITY SECTION:
com.                    900     IN      SOA     a.gtld-servers.net. nstld.verisign-grs.com. 1159700350 1800 900 604800 900

;; Query time: 66 msec
;; SERVER: 
;; WHEN: Sun Oct  1 11:59:40 2006
;; MSG SIZE  rcvd: 106

minserf.com is screwed too

24 September:Contact informs us of minserf.com Bob is now a 'she'. Bananas says hello to 'Amanda Limert'

whois minserf.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: MINSERF.COM
   Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET
   Whois Server: whois.aitdomains.com
   Referral URL: http://www.aitdomains.com
   Name Server: NS2.ALCASERFOBESTDNS.COM
   Name Server: NS1.MANTAREDEGOL.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 14-Sep-2006
   Creation Date: 14-Sep-2006
   Expiration Date: 14-Sep-2007

>>> Last update of whois database: Sun, 24 Sep 2006 07:56:32 EDT 

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

The Data in THE NAMEIT CORPORATION WHOIS database is provided by
THE NAMEIT CORPORATION for information purposes, and to assist persons
in obtaining information about or related to a domain name registration record.
 THE NAMEIT CORPORATION does not guarantee its accuracy.  By submitting a
WHOIS query, you agree that you will use this Data only for lawful purposes
and that, under no circumstances will you use this Data to: (1) allow, enable,
or otherwise support the transmission of mass unsolicited, commercial advertising
or solicitations via e-mail (spam); or  (2) enable high volume, automated,
electronic processes that apply to THE NAMEIT
CORPORATION (or its systems).

THE NAMEIT CORPORATION reserves the right to modify these terms at any time.
 By submitting this query, you agree to abide by this policy.

Domain Name:    minserf.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET


Registrant Contact

Name:           Amanda    Limert
Address:        22983 Coledo Ave
                Alexandria, MN  55498
                US
Email Address:  cosserdo@hotlero.biz
Phone Number:   (639)721-0927


Administrative Contact

Name:           Amanda    Limert
Address:        22983 Coledo Ave
                Alexandria, MN  55498
                US
Email Address:  cosserdo@hotlero.biz
Phone Number:   (639)721-0927


Technical Contact

Name:           Amanda    Limert
Address:        22983 Coledo Ave
                Alexandria, MN  55498
                US
Email Address:  cosserdo@hotlero.biz
Phone Number:   (639)721-0927


Record Created on........ 2006-09-14 18:07:51.162
Expire on................ 2007-09-14 18:16:05.000

  Domain servers in listed order:

        ns2.alcaserfobestdns.com
        ns1.mantaredegol.com

dig minserf.com

; <<>> DiG 9.2.4 << minserf.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER <<- opcode: QUERY, status: NOERROR, id: 2463
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;minserf.com.                   IN      A

;; ANSWER SECTION:
minserf.com.            300     IN      A       210.83.200.219

;; AUTHORITY SECTION:
minserf.com.            300     IN      NS      ns2.minserf.com.
minserf.com.            300     IN      NS      ns1.minserf.com.

;; ADDITIONAL SECTION:
ns1.minserf.com.        300     IN      A       210.83.200.219
ns2.minserf.com.        300     IN      A       210.83.200.219

;; Query time: 300 msec
;; SERVER: 
;; WHEN: Sun Sep 24 12:50:51 2006
;; MSG SIZE  rcvd: 113	
	

23 September:Slow but china seems to have stopped service.

dig emailadvertisinginc.com

; << DiG 9.2.4 << emailadvertisinginc.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

alas seems up again

dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21940
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 1716   IN      A       211.155.132.6

;; AUTHORITY SECTION:
emailadvertisinginc.com. 108317 IN      NS      ns4.emailadvertisinginc.com.
emailadvertisinginc.com. 108317 IN      NS      ns1.emailadvertisinginc.com.
emailadvertisinginc.com. 108317 IN      NS      ns2.emailadvertisinginc.com.
emailadvertisinginc.com. 108317 IN      NS      ns3.emailadvertisinginc.com.

;; Query time: 3 msec
;; SERVER: 
;; WHEN: Sat Sep 23 17:22:02 2006
;; MSG SIZE  rcvd: 129

Hey ho meet colidsilver.com meet 'Collis Williams' Hosting using Chinese open webmail (reported before)

whois colidsilver.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: COLIDSILVER.COM
   Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
   Whois Server: whois.melbourneit.com
   Referral URL: http://www.melbourneit.com
   Name Server: NS2.DALISBANER.COM.DOMAIN-NOT-RENEWED.COM
   Name Server: NS1.MACHDEDIK.COM.DOMAIN-NOT-RENEWED.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 19-Sep-2006
   Creation Date: 19-Sep-2006
   Expiration Date: 19-Sep-2007

<<< Last update of whois database: Sat, 23 Sep 2006 12:34:24 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... colidsilver.com
  Creation Date........ 2006-09-19
  Registration Date.... 2006-09-19
  Expiry Date.......... 2007-09-19
  Organisation Name.... Collis Williams

Details removed at request (November 2006) send email request for full disclosure.

Name Server.......... ns1.machdedik.com
  Name erver.......... ns2.dalisbaner.com
  
  dig colidsilver.com

; <<>> DiG 9.2.4 <<>> colidsilver.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45988
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;colidsilver.com.               IN      A

;; ANSWER SECTION:
colidsilver.com.        7       IN      A       210.83.200.219

;; AUTHORITY SECTION:
colidsilver.com.        7       IN      NS      ns1.colidsilver.com.
colidsilver.com.        7       IN      NS      ns2.colidsilver.com.

;; ADDITIONAL SECTION:
ns1.colidsilver.com.    7       IN      A       210.83.200.219
ns2.colidsilver.com.    7       IN      A       210.83.200.219

;; Query time: 2 msec
;; SERVER: 
;; WHEN: Sat Sep 23 17:37:33 2006
;; MSG SIZE  rcvd: 117

whois 210.83.200.219
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

china, yahoo, and Bob Soloway - now that's an evil conbination.

18 September: Talk to Bobs mother. Robert Soloways Mother according to some basic maths Rachel D Soloway (other spelling Rachelle) was 32 when she had brought our spamming satan into the planet - her age is apparently now 59 (2006).

I did not purchase the report but those in the know might wish to take it further.

16 September: New domain 'there she blows' moby dick style seen over in Opsan. - Its our chinese friend again 'liu feu'

whois emailadvertisinginc.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: EMAILADVERTISINGINC.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.EMAILADVERTISINGINC.COM
   Name Server: NS3.EMAILADVERTISINGINC.COM
   Name Server: NS2.EMAILADVERTISINGINC.COM
   Name Server: NS1.EMAILADVERTISINGINC.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 12-Sep-2006
   Creation Date: 27-Aug-2006
   Expiration Date: 27-Aug-2007

>>> Last update of whois database: Fri, 15 Sep 2006 10:03:27 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... emailadvertisinginc.com
  Creation Date........ 2006-08-28 03:03:31
  Registration Date.... 2006-08-28 03:03:31
  Expiry Date.......... 2007-08-28 03:03:31
  Organisation Name.... liu fei
  Organisation Address. xia meng
  Organisation Address.
  Organisation Address. xia meng
  Organisation Address. 321000
  Organisation Address. FJ
  Organisation Address. CN

Admin Name........... liu fei
  Admin Address........ xia meng
  Admin Address........
  Admin Address........ xia meng
  Admin Address........ 321000
  Admin Address........ FJ
  Admin Address........ CN
  Admin Email.......... pop@broadcastemailinc.com
  Admin Phone.......... +86.5922577833
  Admin Fax............ +86.5922577833

Tech Name............ liu fei
  Tech Address......... xia meng
  Tech Address.........
  Tech Address......... xia meng
  Tech Address......... 321000
  Tech Address......... FJ
  Tech Address......... CN
  Tech Email........... pop@broadcastemailinc.com
  Tech Phone........... +86.5922577833
  Tech Fax............. +86.5922577833

Bill Name............ liu fei
  Bill Address......... xia meng
  Bill Address.........
  Bill Address......... xia meng
  Bill Address......... 321000
  Bill Address......... FJ
  Bill Address......... CN
  Bill Email........... pop@broadcastemailinc.com
  Bill Phone........... +86.5922577833
  Bill Fax............. +86.5922577833
  Name Server.......... ns2.emailadvertisinginc.com
  Name Server.......... ns1.emailadvertisinginc.com
  Name Server.......... ns3.emailadvertisinginc.com
  Name Server.......... ns4.emailadvertisinginc.com
sjwest@mail2:~> dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29702
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 3600   IN      A       211.155.132.6

;; AUTHORITY SECTION:
emailadvertisinginc.com. 35491  IN      NS      ns2.emailadvertisinginc.com.
emailadvertisinginc.com. 35491  IN      NS      ns3.emailadvertisinginc.com.
emailadvertisinginc.com. 35491  IN      NS      ns4.emailadvertisinginc.com.
emailadvertisinginc.com. 35491  IN      NS      ns1.emailadvertisinginc.com.

;; ADDITIONAL SECTION:
ns1.emailadvertisinginc.com. 40371 IN   A       218.57.8.93
ns2.emailadvertisinginc.com. 3316 IN    A       211.155.132.6
ns3.emailadvertisinginc.com. 40371 IN   A       222.76.212.175
ns4.emailadvertisinginc.com. 771 IN     A       211.155.132.6

;; Query time: 371 msec
;; SERVER: 
;; WHEN: Sat Sep 16 00:25:58 2006
;; MSG SIZE  rcvd: 193

whois 211.155.132.6
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

admin: Trying new guestbook contact feature - other one seems kaputt so lets try, [Sign My Guestbook] [View My Guestbook]

14 September: 'Because your worth it' In honour of certain make up brand. Sky over at Opsan also ran an experiment and spent some money obtaining a new domain name (something i've yet to do), and yes even Sky too got a Bob Soloway spam too.

Here is a guess, this page got started Bob Soloway was #1 to spam our 'fresh' domain email account. Then being 'intentionally stupid' (experiment page of mine via wayback machine) I unopted (do remember it was a test). Then extra spams to admin,billing and whatever@ started rolling in, and today well there still coming in.

Where does bob get these addresses from.

D\'Arcy Lore
   D\'Arcy Lore
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

D'Arcy Lore, some kind of author (google it), The address 16175 Andrews Ct, can be found in a PCT gazette, can you do better ?. Domain finally dies

dig broadcastemailinc.com

; <<>> DiG 9.2.4 <<>> broadcastemailinc.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

12 September: section appended 'about Bob'. broadcastemailinc.com Moves from China to China (has hosting renewed or something) and new domain observed by others (thanks!) listed below

whois ctandres.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: CTANDRES.COM
   Registrar: INNERWISE, INC. D/B/A ITSYOURDOMAIN.COM
   Whois Server: whois.itsyourdomain.com
   Referral URL: http://www.itsyourdomain.com
   Name Server: NS2.AMESMCALLISTERDNS.COM
   Name Server: NS1.ELDINAPATRISIADNS.COM
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 10-Sep-2006
   Creation Date: 10-Sep-2006
   Expiration Date: 10-Sep-2007

>>> Last update of whois database: Tue, 12 Sep 2006 06:19:30 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
The Data in our WHOIS database is provided by us for information purposes,
and to assist persons in obtaining information about or related to a domain
name registration record.  We do not guarantee its accuracy.  By
submitting a WHOIS query, you agree that you will use this Data only for
lawful purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via e-mail (spam); or  (2) enable
high volume, automated, electronic processes that apply to us, our
systems, or our customers.  We reserve the right to modify these terms at
any time.  By submitting this query, you agree to abide by this policy.


 Domain: ctandres.com

 Registrant
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Administrative
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Billing
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Technical
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Record created on September 10, 2006
 Record last updated on September 10, 2006
 Record expires on September 10, 2007

 Domain Name Servers:
   NS1.ELDINAPATRISIADNS.COM
   NS2.AMESMCALLISTERDNS.COM

dig ctandres.com

; <<>> DiG 9.2.4 <<>> ctandres.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39744
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;ctandres.com.                  IN      A

;; ANSWER SECTION:
ctandres.com.           300     IN      A       210.83.200.219

;; AUTHORITY SECTION:
ctandres.com.           300     IN      NS      ns2.ctandres.com.
ctandres.com.           300     IN      NS      ns1.ctandres.com.

;; ADDITIONAL SECTION:
ns1.ctandres.com.       300     IN      A       210.83.200.219
ns2.ctandres.com.       300     IN      A       210.83.200.219

;; Query time: 283 msec
;; SERVER: 
;; WHEN: Tue Sep 12 11:20:18 2006
;; MSG SIZE  rcvd: 114

Where/Wohin ? ist Carman today ?

inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

Golly gosh - we seem to have been here before. Wheres Spot gone why China silly!

admin note: archive links fixed, and 'package' pictures (my photo's) inserted into this file in various places.

7 September: Fresh spam in above table. an inside look of the broadcastspam package.

Well (read url first) the identification of Vassil, and the list design is an revelation, the new mailer and the quality of the lists left much to be desired.

A lot we don't know still about the specific Bob use of the lists. Anyhow its nice demolish the claim that billing@domain signed up for spam. Please read the link, and make up your own mind.

4 September: Meet broadcastemailinc.com, multiple personalities of liu fei/xia meng.

whois broadcastemailinc.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: BROADCASTEMAILINC.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS1.BROADCASTEMAILINC.COM
   Name Server: NS4.BROADCASTEMAILINC.COM
   Name Server: NS3.BROADCASTEMAILINC.COM
   Name Server: NS2.BROADCASTEMAILINC.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 31-Aug-2006
   Creation Date: 27-Aug-2006
   Expiration Date: 27-Aug-2007

<<<< Last update of whois database: Mon, 04 Sep 2006 08:01:16 EDT

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... broadcastemailinc.com
  Creation Date........ 2006-08-28 03:03:34
  Registration Date.... 2006-08-28 03:03:34
  Expiry Date.......... 2007-08-28 03:03:34
  Organisation Name.... liu fei
  Organisation Address. xia meng
  Organisation Address.
  Organisation Address. xia meng
  Organisation Address. 321000
  Organisation Address. FJ
  Organisation Address. CN

Admin Name........... liu fei
  Admin Address........ xia meng
  Admin Address........
  Admin Address........ xia meng
  Admin Address........ 321000
  Admin Address........ FJ
  Admin Address........ CN
  Admin Email.......... pop@broadcastemailinc.com
  Admin Phone.......... +86.5922577833
  Admin Fax............ +86.5922577833

Tech Name............ liu fei
  Tech Address......... xia meng
  Tech Address.........
  Tech Address......... xia meng
  Tech Address......... 321000
  Tech Address......... FJ
  Tech Address......... CN
  Tech Email........... pop@broadcastemailinc.com
  Tech Phone........... +86.5922577833
  Tech Fax............. +86.5922577833

Bill Name............ liu fei
  Bill Address......... xia meng
  Bill Address.........
  Bill Address......... xia meng
  Bill Address......... 321000
  Bill Address......... FJ
  Bill Address......... CN
  Bill Email........... pop@broadcastemailinc.com
  Bill Phone........... +86.5922577833
  Bill Fax............. +86.5922577833
  Name Server.......... ns1.broadcastemailinc.com
  Name Server.......... ns2.broadcastemailinc.com
  Name Server.......... ns3.broadcastemailinc.com
  Name Server.......... ns4.broadcastemailinc.com

  dig broadcastemailinc.com

; <<>> DiG 9.2.4 <<>> broadcastemailinc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34092
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailinc.com.         IN      A

;; ANSWER SECTION:
broadcastemailinc.com.  3600    IN      A       211.155.132.6

;; AUTHORITY SECTION:
broadcastemailinc.com.  358     IN      NS      ns2.virtualinc.info.

;; Query time: 421 msec
;; SERVER: 
;; WHEN: Mon Sep  4 13:03:10 2006
;; MSG SIZE  rcvd: 88

China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

1 September: Dead this time. - I have incriminating stuff too, will take some to analyse.

whois emailadvertisingagency.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry
registry database. The data in this record is provided by Public Interest Registry
for informational purposes only, and Public Interest Registry does not guarantee its
accuracy.  This service is intended only for query-based access.  You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D128097125-LROR
Domain Name:EMAILADVERTISINGAGENCY.ORG
Created On:31-Aug-2006 17:01:42 UTC
Last Updated On:01-Sep-2006 15:21:30 UTC
Expiration Date:31-Aug-2007 17:01:42 UTC
Sponsoring Registrar:Namesdirect Inc. (R92-LROR)
Status:CLIENT HOLD
Status:TRANSFER PROHIBITED
Registrant ID:DOT-SX8GWS0OUMGE
Registrant Name:Deactivated (Spam)
Registrant Organization:Dotster, Inc
Registrant Street1:8100 NE Parkway Drive
Registrant Street2:Suite 300
Registrant Street3:
Registrant City:Vancouver
Registrant State/Province:Washington
Registrant Postal Code:98662
Registrant Country:US
Registrant Phone:+1.3602532210
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:abuse@dotster.com
Admin ID:DOT-QM9ILR3UBN5C
Admin Name:Deactivated (Spam)
Admin Organization:Dotster, Inc
Admin Street1:8100 NE Parkway Drive
Admin Street2:Suite 300
Admin Street3:
Admin City:Vancouver
Admin State/Province:Washington
Admin Postal Code:98662
Admin Country:US
Admin Phone:+1.3602532210
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:abuse@dotster.com
Tech ID:DOT-7O7UIX01KN26
Tech Name:Deactivated (Spam)
Tech Organization:Dotster, Inc
Tech Street1:8100 NE Parkway Drive
Tech Street2:Suite 300
Tech Street3:
Tech City:Vancouver
Tech State/Province:Washington
Tech Postal Code:98662
Tech Country:US
Tech Phone:+1.3602532210
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:abuse@dotster.com
Name Server:NS1.SPAMSHUTDOWN.COM
Name Server:NS2.SPAMSHUTDOWN.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

dig emailadvertisingagency.org

; <<>> DiG 9.2.4 <<>> emailadvertisingagency.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17309
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisingagency.org.    IN      A

;; Query time: 122 msec
;; 
;; WHEN: Fri Sep  1 17:29:02 2006
;; MSG SIZE  rcvd: 44

31 August: Temporary Bye Bye emailadvertisingagency.org pir/.org registrar temporarily terminates my favourite spammer.

whois emailadvertisingagency.org
NOT FOUND

no dns

But a subtle change here and there to the whois and things return.

whois emailadvertisingagency.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry
registry database. The data in this record is provided by Public Interest Registry
for informational purposes only, and Public Interest Registry does not guarantee its
accuracy.  This service is intended only for query-based access.  You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D128097125-LROR
Domain Name:EMAILADVERTISINGAGENCY.ORG
Created On:31-Aug-2006 17:01:42 UTC
Last Updated On:31-Aug-2006 17:07:20 UTC
Expiration Date:31-Aug-2007 17:01:42 UTC
Sponsoring Registrar:Namesdirect Inc. (R92-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:DOT-RP43F6ZP7ACG
Registrant Name:Bob Alan
Registrant Organization:NA
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:WA
Registrant Postal Code:98111
Registrant Country:US
Registrant Phone:+1.2062231271
Registrant Phone Ext.:
Registrant FAX:+1.2062231271
Registrant FAX Ext.:
Registrant Email:pres10000@ranmamail.com was  ead1000@ranmamail.com
Admin ID:DOT-4FT3NDJUKNU3
Admin Name:Bob Alan
Admin Organization:NA
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:WA
Admin Postal Code:98111
Admin Country:US
Admin Phone:+1.2062231271
Admin Phone Ext.:
Admin FAX:+1.2062231271
Admin FAX Ext.:
Admin Email:pres10000@ranmamail.com
Tech ID:DOT-DFV0X6IEEWTW
Tech Name:Bob Alan
Tech Organization:NA
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:WA
Tech Postal Code:98111
Tech Country:US
Tech Phone:+1.2062231271
Tech Phone Ext.:
Tech FAX:+1.2062231271
Tech FAX Ext.:
Tech Email:pres10000@ranmamail.com
Name Server:NS1.EMAILADVERTISINGAGENCY.ORG
Name Server:NS2.EMAILADVERTISINGAGENCY.ORG
Name Server:NS3.EMAILADVERTISINGAGENCY.ORG
Name Server:NS4.EMAILADVERTISINGAGENCY.ORG
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

dig emailadvertisingagency.org

; <<>> DiG 9.2.4 <<>> emailadvertisingagency.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38180
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 3

;; QUESTION SECTION:
;emailadvertisingagency.org.    IN      A

;; ANSWER SECTION:
emailadvertisingagency.org. 3600 IN     A       211.155.132.206

;; AUTHORITY SECTION:
emailadvertisingagency.org. 43199 IN    NS      ns3.emailadvertisingagency.org.
emailadvertisingagency.org. 43199 IN    NS      ns4.emailadvertisingagency.org.
emailadvertisingagency.org. 43199 IN    NS      ns1.emailadvertisingagency.org.
emailadvertisingagency.org. 43199 IN    NS      ns2.emailadvertisingagency.org.

;; ADDITIONAL SECTION:
ns1.emailadvertisingagency.org. 2441 IN A       211.155.132.206
ns2.emailadvertisingagency.org. 2441 IN A       211.155.132.206
ns4.emailadvertisingagency.org. 2441 IN A       211.155.132.206

;; Query time: 471 msec
;; SERVER: secret
;; WHEN: Thu Aug 31 18:36:52 2006
;; MSG SIZE  rcvd: 180

Oh well ! - however Karen rings Bob to ask him to stop spamming, she then emails me.

Name: Karen

I am a victim of this NPR spamming.  I am  not
(stuff removed by me) very computer literate, but I know that my
computer isn't running right
since I have been getting NPR's spam, and also,
so much OTHER junk is cramming my email box....

I was glad to find your site. I called the # you
posted for Bob, and he hung up on me too....
now, can't get through to them....

Is there anything I can do?

Karen welcome and yet another person whom that can affirm that Bob has a bad telephone manner.

29 August: Not getting much else down another recommendation http://www.aussieninjakids.org/security_notice.htm, theemailcorporation.org is down, along with broadcastemailcorporation.com

But say welcome to: emailadvertisingagency.org

whois emailadvertisingagency.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry

registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy.  This service is intended only for query-based access.  

You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D127948604-LROR
Domain Name:EMAILADVERTISINGAGENCY.ORG
Created On:29-Aug-2006 00:33:29 UTC
Last Updated On:29-Aug-2006 00:56:01 UTC
Expiration Date:29-Aug-2007 00:33:29 UTC
Sponsoring Registrar:Network Solutions LLC (R63-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:41052107-NSI
Registrant Name:Bob Soloway
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:WA
Registrant Postal Code:98111
Registrant Country:US
Registrant Phone:+1.2062231271
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:ead1000@ranmamail.com
Admin ID:41052107-NSI
Admin Name:Bob Soloway
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:WA
Admin Postal Code:98111
Admin Country:US
Admin Phone:+1.2062231271
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:ead1000@ranmamail.com
Tech ID:41052107-NSI
Tech Name:Bob Soloway
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:WA
Tech Postal Code:98111
Tech Country:US
Tech Phone:+1.2062231271
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:ead1000@ranmamail.com
Name Server:NS1.EMAILADVERTISINGAGENCY.ORG
Name Server:NS2.EMAILADVERTISINGAGENCY.ORG
Name Server:NS3.EMAILADVERTISINGAGENCY.ORG
Name Server:NS4.EMAILADVERTISINGAGENCY.ORG
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

dig emailadvertisingagency.org

; <<>> DiG 9.2.4 <<>> emailadvertisingagency.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47925
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisingagency.org.    IN      A

;; ANSWER SECTION:
emailadvertisingagency.org. 3600 IN     A       211.155.132.206

;; AUTHORITY SECTION:
emailadvertisingagency.org. 2803 IN     NS      ns2.virtualinc.info.

;; Query time: 464 msec
;; SERVER: 
;; WHEN: Wed Aug 30 13:57:14 2006
;; MSG SIZE  rcvd: 93

China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

28 August: theemailboardcastcorporation.org is down having no dns.

27 August: Dog reports that broadcastemailcompany.com is dead after two days ( a registrar termination), and it seems to have a new owner already pointing to a redirect page at 66.118.136.67

Sago Networks SAGONET-IPV4-1 NET-66-118-128-0-1 
                                  66.118.128.0 - 66.118.191.255
				  
BiJu Mathew SAGO-66-118-136-64 NET-66-118-136-64-1 
                               66.118.136.64 66.118.136.71
			       
# ARIN WHOIS database, last updated 2006-08-27 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

whois broadcastemailcompany.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: BROADCASTEMAILCOMPANY.COM
   Registrar: COMPANA, LLC
   Whois Server: whois.budgetnames.com
   Referral URL: http://www.budgetnames.com
   Name Server: NS2.BODYFUNCTIONS.COM
   Name Server: NS1.BODYFUNCTIONS.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 28-Aug-2006
   Creation Date: 28-Aug-2006
   Expiration Date: 28-Aug-2007

>>> Last update of whois database: Mon, 28 Aug 2006 17:47:42 EDT

the New owner is not known as of writing this entry, after hoop jumping at budgetnames.com whois webform - in order to stop spammers, this page at times could become a humour page. (EPP status means domain is reactivated by some sucker).

.org seems to have host its dns servers too.

dig theemailcorporation.org

; <<>> DiG 9.2.4 <<>> theemailcorporation.org
;; global options:  printcmd
;; connection timed out; no servers could be reached

In order to differentate between Bob and non Bob domains picked up in rebound after termination so I'm using this.

Quite why anybody thinks its a good idea is another mater entirely.

26 August: Whack a mole continues.

http://www.networksolutions.com


Registrant:
NIM Corporation
   PO Box 1259
   Seattle, WA 98101
   US

   Domain Name: BROADCASTEMAILCOMPANY.COM

   Administrative Contact, Technical Contact:
      NIM Corporation           pres100@ranmamail.com
      PO Box 1259
      Seattle, WA 98101
      US
      206-223-1271

   Record expires on 24-Aug-2007.
   Record created on 24-Aug-2006.
   Database last updated on 26-Aug-2006 10:29:09 EDT.

   Domain servers in listed order:

   NS1.BROADCASTEMAILCOMPANY.COM 218.57.8.93
   NS2.BROADCASTEMAILCOMPANY.COM 211.155.132.228
   NS3.BROADCASTEMAILCOMPANY.COM 222.76.212.175
   NS4.BROADCASTEMAILCOMPANY.COM 208.2.150.150
   
   dig broadcastemailcompany.com

; <<>> DiG 9.2.4 <<>> broadcastemailcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38013
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;broadcastemailcompany.com.     IN      A

;; ANSWER SECTION:
broadcastemailcompany.com. 3600 IN      A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailcompany.com. 13287 IN     NS      ns3.broadcastemailcompany.com.
broadcastemailcompany.com. 13287 IN     NS      ns4.broadcastemailcompany.com.
broadcastemailcompany.com. 13287 IN     NS      ns1.broadcastemailcompany.com.
broadcastemailcompany.com. 13287 IN     NS      ns2.broadcastemailcompany.com.

;; ADDITIONAL SECTION:
ns1.broadcastemailcompany.com. 42307 IN A       218.57.8.93
ns2.broadcastemailcompany.com. 2710 IN  A       211.155.132.206
ns3.broadcastemailcompany.com. 42307 IN A       222.76.212.175
ns4.broadcastemailcompany.com. 38572 IN A       208.2.150.150

;; Query time: 4508 msec
;; SERVER: #53()
;; WHEN: Sat Aug 26 15:40:12 2006
;; MSG SIZE  rcvd: 195

China - seen before spotted by by Dog

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Clean up of paragraphs, document of recent spam text added near the top.

25 August:the Sky notices that two days later and our friends at the registrar do something (I was cc'ed a spamcop report). another Friend with domain also gets a spam.

No match for "EBROADCASTCORPORATION.COM".
>>> Last update of whois database: Fri, 25 Aug 2006 05:46:39 EDT 

23 August:Meet ebroadcastcorporation.com

http://www.networksolutions.com


Registrant:
Davidson, Pat
   4951 Netarts Hwy West
   Tillamook, OR 97141
   US

   Domain Name: EBROADCASTCORPORATION.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patdvs2000@yahoo.com
      4951 Netarts Hwy West
      Tillamook, OR 97141
      US
      541-550-7322

   Record expires on 22-Aug-2007.
   Record created on 22-Aug-2006.
   Database last updated on 23-Aug-2006 08:39:19 EDT.

   Domain servers in listed order:

   NS1.EBROADCASTCORPORATION.COM 218.57.8.93
   NS2.EBROADCASTCORPORATION.COM 211.155.132.228
   NS3.EBROADCASTCORPORATION.COM 222.76.212.175
   NS4.EBROADCASTCORPORATION.COM 208.2.150.150
   
   dig ebroadcastcorporation.com

; <<>> DiG 9.2.4 <<>> ebroadcastcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29712
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;ebroadcastcorporation.com.     IN      A

;; ANSWER SECTION:
ebroadcastcorporation.com. 3600 IN      A       211.155.132.206

;; AUTHORITY SECTION:
ebroadcastcorporation.com. 24132 IN     NS      ns3.ebroadcastcorporation.com.
ebroadcastcorporation.com. 24132 IN     NS      ns4.ebroadcastcorporation.com.
ebroadcastcorporation.com. 24132 IN     NS      ns1.ebroadcastcorporation.com.
ebroadcastcorporation.com. 24132 IN     NS      ns2.ebroadcastcorporation.com.

;; ADDITIONAL SECTION:
ns1.ebroadcastcorporation.com. 43198 IN A       218.57.8.93
ns2.ebroadcastcorporation.com. 43198 IN A       211.155.132.228
ns3.ebroadcastcorporation.com. 2552 IN  A       211.155.132.206
ns4.ebroadcastcorporation.com. 1547 IN  A       211.155.132.206

;; Query time: 557 msec
;; SERVER: ?#53(?)
;; WHEN: Wed Aug 23 14:38:45 2006
;; MSG SIZE  rcvd: 195

Whoopee its ... China

% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

what a surprise. Apologies about borked guestbook.

22 August: Scamnot tells me Ive 'boobed' a few things like forgeting about broadcastmarketingcorp.com now added to domain list and broadcastemailcorporation.com (hosted in anti-spammy China) details:

dig broadcastemailcorporation.com

; >> DiG 9.2.4 >> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER- opcode: QUERY, status: NOERROR, id: 1767
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 3600 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 43200 IN NS      ns2.xinnetdns.com.
broadcastemailcorporation.com. 43200 IN NS      ns2.xinnet.cn.

;; ADDITIONAL SECTION:
ns2.xinnetdns.com.      36140   IN      A       210.51.170.67

;; Query time: 385 msec
;; SERVER: #53()
;; WHEN: Tue Aug 22 16:36:17 2006
;; MSG SIZE  rcvd: 134

inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

Normal service shall be 'ahem' resumed soon. broadcastmarketingcorp.com (host i missed) follows below.

http://www.networksolutions.com


Registrant:
Davidson, Pat
   4951 Netarts Hwy West
   Tillamook, OR 97141
   US

   Domain Name: BROADCASTMARKETINGCORP.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patdvs2000@yahoo.com
      4951 Netarts Hwy West
      Tillamook, OR 97141
      US
      541-550-7322

   Record expires on 11-Aug-2007.
   Record created on 11-Aug-2006.
   Database last updated on 22-Aug-2006 12:01:27 EDT.

   Domain servers in listed order:

   NS1.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 218.57.8.93
   NS2.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 211.155.132.228
   NS3.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 222.76.212.175
   NS4.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 208.2.150.150
   
   No dns host
   

21 August: Dog reports that broadcastemailcorporation.com (16 June last seen) makes an resurrection from the dead on the same host it died on.

If anybody can find my ie html bug on line 53 i will credit them with a thank you, major ie problem sorted (i hope) - remember other browsers exist too - I'm not getting ie these days. Meebo is borked in ie it seems works fine in Firefox.

20 August: deceased (doa) emailadvertisingcorporation.com terminated by registrar, and thebroadcastemailcorporation.com is 'up for sale' http://www.domainsystems.com/bidform.php?domain=thebroadcastemailcorporation.com bid now spammers and supported by our friends at moniker.com

18 August: Bob Soloway goes on tour to Latin American visiting 'darkest' Peru (once home to paddington bear - we did Hong Kong Phooey in the last entry) and Brazil too. Evidence seen in cc'ed spamcop reports. Looking forward to seeing the holiday pictures Bob.

The 'sky' provides us with a location: http://local.live.com/?v=2&sp=aN.ry0xgv4t50yv_1001%25204th%2520Ave%252c%2520Seattle%252c%2520WA%252098154-1119%252c%2520United%2520States___

16 August: Students of Hong Kong Phooey, Ladies, and gentlemen meet emailadvertisingcorporation.com. Thanks to Sky at Opsan for the id.

http://www.networksolutions.com


Registrant:
Davidson, Pat
   PO Box 444
   Springfield, OR 97477
   US

   Domain Name: EMAILADVERTISINGCORPORATION.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patd2000@yahoo.com
      PO Box 444
      Springfield, OR 97477
      US
      541-543-5661

   Record expires on 11-Aug-2007.
   Record created on 11-Aug-2006.
   Database last updated on 15-Aug-2006 15:10:26 EDT.

   Domain servers in listed order:

   NS1.EMAILADVERTISINGCORPORATION.COM 218.57.8.93
   NS2.EMAILADVERTISINGCORPORATION.COM 211.155.132.228
   NS3.EMAILADVERTISINGCORPORATION.COM 222.76.212.175
   NS4.EMAILADVERTISINGCORPORATION.COM 208.2.150.150
   
  dig emailadvertisingcorporation.com

; <<>> DiG 9.2.4 <<>> emailadvertisingcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51910
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailadvertisingcorporation.com. IN    A

;; ANSWER SECTION:
emailadvertisingcorporation.com. 3250 IN A      211.155.132.206

;; AUTHORITY SECTION:
emailadvertisingcorporation.com. 35534 IN NS ns2.emailadvertisingcorporation.com.
emailadvertisingcorporation.com. 35534 IN NS ns3.emailadvertisingcorporation.com. 
emailadvertisingcorporation.com. 35534 IN NS    ns4.emailadvertisingcorporation.com.
emailadvertisingcorporation.com. 35534 IN NS ns1.emailadvertisingcorporation.com.

;; ADDITIONAL SECTION:
ns1.emailadvertisingcorporation.com. 35534 IN A 218.57.8.93
ns2.emailadvertisingcorporation.com. 35534 IN A 211.155.132.228
ns3.emailadvertisingcorporation.com. 35534 IN A 222.76.212.175
ns4.emailadvertisingcorporation.com. 23054 IN A 208.2.150.150

;; Query time: 3 msec
;; SERVER: ?#53(?)
;; WHEN: Tue Aug 15 20:10:53 2006
;; MSG SIZE  rcvd: 201

'Pat' rings a bell its not 'Bob', but Pat will will do - China ? oh yes !!! and seen before

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC
person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

15 August: A Ninja running a children's school (how the mighty warriors fall) reports that broadcastemailgroup.com is deceased (hosting not renewed/paid? at Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd ) and so is broadcastemailworld.com down too (my discovery). Alas the Ninja has no 'goods' for his austrailian money - Austrialain police I'm sure would like to talk to this fraudster/come email spammer (Note to Ninja: spam is illegal in australia).

Of interest is that 'after care support' for Bob has moved to emailsupport@msbx.net which appears to be a dropbox service, love the spam filtering irony here

They Kenosha Information Technology, Inc. 8809 39th Ave, Kenosha, WI 53142 currently live on ev1.net -> abuse@ev1.net

Other domains still - 'up' existing hosts still being used.

10 August: News finally (slow month). charter.net pc (american) spewing spam for Bob (see spamcop reports), and broadcastemailcorporation.com makes a reappearance (last seen 22 June 2006 new host is 221.10.254.97 which unbelievably is hosted at those I hate spammers known as the Chinese.

dig broadcastemailcorporation.com

; <<>> DiG 9.2.4 <<>> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45728
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 2744 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 42343 IN NS      ns2.xinnet.cn.
broadcastemailcorporation.com. 42343 IN NS      ns2.xinnetdns.com.

;; ADDITIONAL SECTION:
ns2.xinnet.cn.          32463   IN      A       210.51.170.67

;; Query time: 3 msec
;; WHEN: Thu Aug 10 15:44:10 2006

inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

Bobs been playing with the masthead again its now nport, what fun he must have. Looking forward to the next one too. screen dumps are like so fun

Thanks for spamcop cc spamnot one of the reports had

dig glennconstruction.com

; <<>> DiG 9.2.4 <<>> glennconstruction.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7259
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;glennconstruction.com.         IN      A

;; ANSWER SECTION:
glennconstruction.com.  3600    IN      A       69.29.58.153

;; AUTHORITY SECTION:
glennconstruction.com.  3600    IN      NS      PARK11.SECURESERVER.NET.
glennconstruction.com.  3600    IN      NS      PARK12.SECURESERVER.NET.

;; Query time: 175 msec
;; WHEN: Thu Aug 10 16:17:44 2006
;; MSG SIZE  rcvd: 113

dnsreport thinks its not a relay (same ip) but looks compromised as it reports.

mail.glennconstruction.com:
    220 glennconstruction.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.211 ready at Thu, 10 Aug 2006 10:22:08 -0500 

Seems to be open for spamming, Im sure a proper relay check is in order for glennconstruction.com, alas the owner seems to want to remain anon.

Administrative Contact:
      Private, Registration  GLENNCONSTRUCTION.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599

Clean up of xhtml to a state of 'validness' - which depending on who you believe is or is not valid html. make your judgement on the ongoings at the w3c.

31 July: THEEMAILCORPORATION.ORG is back in China, what a surprise.

This is more interesting.




















A demo of what Bob could 'see'

Its a refugee from HP it appears, open-xhange.org and acts much like a M$ Exchange server, url is http://www.theemailcorporation.org/ cgi-bin/openwebmail/openwebmail.pl the website we all know and love is at /bec (as before) oh typing in the domain name got me there.

How Bob Soloway hates American workers we wont even buy a modern email server, thankfully it seems Bob still has to use stuff like this because hes too dumb to setup up sendmail/imap server which is also hosted in china.

dig theemailcorporation.org

; <<>> DiG 9.2.4 <<>> theemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44925
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;theemailcorporation.org.       IN      A

;; ANSWER SECTION:
theemailcorporation.org. 300    IN      A       210.83.200.219

;; AUTHORITY SECTION:
theemailcorporation.org. 300    IN      NS      ns1.theemailcorporation.org.
theemailcorporation.org. 300    IN      NS      ns2.theemailcorporation.org.

;; Query time: 

inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

27 July: Thanks to sky for spotting new masthead NPRT ... at Opsan - new screen dump in current operations section,

25 July:THEEMAILCORPORATION.ORG has no dns. Also (seen in nanae), does Soloway have competition see

whois bulk-email-broadcasting.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: BULK-EMAIL-BROADCASTING.COM
   Registrar: BULKREGISTER, LLC.
   Whois Server: whois.bulkregister.com
   Referral URL: http://www.bulkregister.com
   Name Server: NS1.EXPEDITEMG.COM
   Name Server: NS2.EXPEDITEMG.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 13-Feb-2006
   Creation Date: 12-Feb-2003
   Expiration Date: 12-Feb-2007

>>> Last update of whois database: Tue, 25 Jul 2006 12:06:00 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
The data in BulkRegister, LLC WHOIS database is provided to you by
BulkRegister, LLC for information purposes only, that is, to assist you in
obtaining information about or related to a domain name registration
record.  BulkRegister, LLC makes this information available "as is", and
does not guarantee its accuracy.  By submitting a WHOIS query, you
agree that you will use this data only for lawful purposes and that,
under no circumstances will you use this data to: (1) allow, enable,
or otherwise support the transmission of mass or bulk unsolicited,
commercial advertising or solicitations via electronic mail, aka (SPAM).
(2) enable high volume, automated, electronic processes that apply
to BulkRegister, LLC (or its systems).  The compilation, repackaging,
dissemination or other use of this data is expressly prohibited without
the prior written consent of BulkRegister, LLC.  BulkRegister, LLC reserves
the right to modify these terms at any time.  By submitting this query,
you agree to abide by these terms.


Expedite Media Group
   245 W. Roosevelt Road
   West Chicago, Illinois 60185
   US

   Domain Name: BULK-EMAIL-BROADCASTING.COM

   Administrative Contact:
        n/a n/a domains@expeditemg.com
        Expedite Media Group
        245 W. Roosevelt Road
        West Chicago, Illinois 60185
        US
        Phone: +1 630-876-8066
        Fax: +1 630-876-8146
   Technical Contact:
        n/a n/a domains@expeditemg.com
        Expedite Media Group
        245 W. Roosevelt Road
        West Chicago, Illinois 60185
        US
        Phone: +1 630-876-8066
        Fax: +1 630-876-8146
   Billing Contact:
        n/a n/a domains@expeditemg.com
        Expedite Media Group
        245 W. Roosevelt Road
        West Chicago, Illinois 60185
        US
        Phone: +1 630-876-8066
        Fax: +1 630-876-8146

   Record updated on 2006-02-14 06:36:11
   Record created on 2003-02-12
   Record expires on 2007-02-12
   Database last updated on 2006-07-25 12:06:22 EST

   Domain servers in listed order:

   NS1.EXPEDITEMG.COM            71.194.7.54
   NS2.EXPEDITEMG.COM            71.194.7.54

   TransferGuard LOCK Status => ENABLED

That's american hosting, different to Soloway usual website too.

19 July: Meet theemailcorporation.org/bec/, that's a new registrar or we have not seen it recently.

whois theemailcorporation.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry
registry database. The data in this record is provided by Public Interest Registry
for informational purposes only, and Public Interest Registry does not guarantee its
accuracy.  This service is intended only for query-based access.  You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D125009123-LRMS
Domain Name:THEEMAILCORPORATION.ORG
Created On:24-Jun-2006 09:46:28 UTC
Last Updated On:06-Jul-2006 23:41:30 UTC
Expiration Date:24-Jun-2007 09:46:28 UTC
Sponsoring Registrar:eNom, Inc. (R39-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:9CEA66B30549F72F
Registrant Name:Terry Cohen
Registrant Organization:Kersengton PC Doctors
Registrant Street1:4121 Dutchmans Lane
Registrant Street2:
Registrant Street3:
Registrant City:Louisville
Registrant State/Province:KY
Registrant Postal Code:40207
Registrant Country:US
Registrant Phone:+1.2433019148
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: vasfelt@yahoo.com
Admin ID:9CEA66B30549F72F
Admin Name:Terry Cohen
Admin Organization:Kersengton PC Doctors
Admin Street1:4121 Dutchmans Lane
Admin Street2:
Admin Street3:
Admin City:Louisville
Admin State/Province:KY
Admin Postal Code:40207
Admin Country:US
Admin Phone:+1.2433019148
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:vasfelt@yahoo.com
Tech ID:9CEA66B30549F72F
Tech Name:Terry Cohen
Tech Organization:Kersengton PC Doctors
Tech Street1:4121 Dutchmans Lane
Tech Street2:
Tech Street3:
Tech City:Louisville
Tech State/Province:KY
Tech Postal Code:40207
Tech Country:US
Tech Phone:+1.2433019148
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:vasfelt@yahoo.com
Name Server:NS1.THEEMAILCORPORATION.ORG
Name Server:NS2.THEEMAILCORPORATION.ORG
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

; <<>> DiG 9.2.4 <<>> theemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7722
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;theemailcorporation.org.       IN      A

;; ANSWER SECTION:
theemailcorporation.org. 300    IN      A       210.83.200.219

;; AUTHORITY SECTION:
theemailcorporation.org. 300    IN      NS      ns2.theemailcorporation.org.
theemailcorporation.org. 300    IN      NS      ns1.theemailcorporation.org.

inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

China, fancy that.

16 July: Meet broadcastemailworld.com

http://www.networksolutions.com


Registrant:
Davidson, Pat
   PO Box 444
   Springfield, OR 97477
   US

   Domain Name: BROADCASTEMAILWORLD.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patd2000@yahoo.com
      PO Box 444
      Springfield, OR 97477
      US
      541-543-5661

   Record expires on 12-Jul-2007.
   Record created on 12-Jul-2006.
   Database last updated on 15-Jul-2006 10:06:18 EDT.

   Domain servers in listed order:

   NS1.BROADCASTEMAILWORLD.COM  218.57.8.93
   NS2.BROADCASTEMAILWORLD.COM  211.155.132.228
   NS3.BROADCASTEMAILWORLD.COM  222.76.212.175
   NS4.BROADCASTEMAILWORLD.COM  208.2.150.150

Pat could be a boy or a girl.

dig broadcastemailworld.com

; <<>> DiG 9.2.4 <<>> broadcastemailworld.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58792
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailworld.com.       IN      A

;; ANSWER SECTION:
broadcastemailworld.com. 3600   IN      A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailworld.com. 36612  IN      NS      ns1.broadcastemailworld.com.
broadcastemailworld.com. 36612  IN      NS      ns2.broadcastemailworld.com.
broadcastemailworld.com. 36612  IN      NS      ns3.broadcastemailworld.com.
broadcastemailworld.com. 36612  IN      NS      ns4.broadcastemailworld.com.

;; ADDITIONAL SECTION:
ns2.broadcastemailworld.com. 36612 IN   A       211.155.132.228

That's got to be China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast &  TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

We have met before too very much in love with spam Also meet BROADCASTEMAILGROUP.COM

http://www.networksolutions.com


Registrant:
Davidson, Pat
   PO Box 444
   Springfield, OR 97477
   US

   Domain Name: BROADCASTEMAILGROUP.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patd2000@yahoo.com
      PO Box 444
      Springfield, OR 97477
      US
      541-543-5661

   Record expires on 12-Jul-2007.
   Record created on 12-Jul-2006.
   Database last updated on 15-Jul-2006 10:21:26 EDT.

   Domain servers in listed order:

   NS1.BROADCASTEMAILWORLD.COM  218.57.8.93
   NS2.BROADCASTEMAILWORLD.COM  211.155.132.228
   NS3.BROADCASTEMAILWORLD.COM  222.76.212.175
   NS4.BROADCASTEMAILWORLD.COM  208.2.150.150
   
   dig broadcastemailgroup.com

; <<>> DiG 9.2.4 <<>> broadcastemailgroup.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61701
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailgroup.com.       IN      A

;; ANSWER SECTION:
broadcastemailgroup.com. 3600   IN      A       211.155.132.206

;; Query time: 

Thats the same ip as the first domain name in the date entry..

15 July:'rumour' of up then domain name bbs007.com thanks to Ed, It seems to be those I hate spam chinese communists again. Strange.

14 July: Bob sends a spam to domain owner email (we have tech issues with this) (its been a while) or has ?he/she got .eu registrar data ?

whoopie spam has image too with post operation sex change pictures (nice tommy tuck), and they really did do the sex change - thats got to be a improvement on being Mr Schmitt hey Bob, who was 'Mr Schmitts' doctor, many tv's out there would love to know who did it for you.

See the sections. for analysis, if your reporting Bobbettes crap be carefull the spf, subject, to and from (four items) had your email address in. I'm still getting spam from Bob, be wise.

Hes a girl spammer now it seems. but still waiting for the face transplant operation. (this picture was actually sent by Bob) If you consider what it has to do with email spam (in context) your doing better than us. - Hey the jokes now thats another matter.

11 July: emarketingcorp.cn seems to have been suspended by our spam friendly chinese registrar. We are not Bob Soloway so asking us to stop Bob's spamming is a waste of time. This site documents his going ons.

07 July:Bob does not like criticism, so posting as Nemesis he said he would pay to have himself murdered (financial means unknown), a couple of days later after refusing suggestions to sue himself for spamming, and with nobody taking him up on the offer over at opsan, Bob then complains about the site and his posting.

So was it a threat? no it was a suicide attempt by our featured spammer. I think you can add missing a few brain cells to the Bob Soloway Picture too. 'MEDICATION TIME'. Somebody better reserve a nice doctor to assess Bob - Washington State has a 'drain' on its healthcare budget. - perhaps its a life insurance fraud ?

Lol "Priceless"

06 July:Meet new host (as expected) sans domain name (i wonder why ? - humour) Bob 211.155.132.206/welcome.html Yes its our friends in China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC
broadcastemailworld.com details about them on this page

BROADCASTEMAILGROUP.COM
person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CNbroadcastemailworld.com details about them on this page

BROADCASTEMAILGROUP.COM
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.cbroadcastemailworld.com details about them on this page

BROADCASTEMAILGROUP.COMom
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Thanks for the 3 spamcop reports too. Spamming from America via rr.com, and Bulgaria too emarketingcobroadcastemailworld.com details about them on this page
BROADCASTEMAILGROUP.COMrp.cn up again

dig emarketingcorp.cn

; <<>> DiG 9.2.4 <<>> emarketingcorp.cn
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52132
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;emarketingcorp.cn.             IN      A

;; ANSWER SECTION:
emarketingcorp.cn.      10800   IN      A       218.30.100.92

;; AUTHORITY SECTION:
emarketingcorp.cn.      10800   IN      NS      dns9.hichina.com.
emarketingcorp.cn.      10800   IN      NS      dns10.hichina.com.

Meet the spam is good communists in Beijing (China)

inetnum:      218.30.96.0 - 218.30.127.255
netname:      CHINANET-IDC-BJ
descr:        CHINANET IDC center
descr:        China Telecom
descr:        Beijing 100088
country:      CN
admin-c:      HC55-AP
tech-c:       HC55-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINATELECOM-BJ
changed:      bjnic@bjtelecom.net 20040322
status:       ALLOCATED NON-PORTABLE
source:       APNIC

person:       Hostmaster of Beijing Telecom corporation CHINA   TELECOM
nic-hdl:      HC55-AP
e-mail:       bjnic@bjtelecom.net
address:      Beijing Telecom
address:      No. 107 XiDan Beidajie, Xicheng District Beijing
phone:        +86-010-58503461
fax-no:       +86-010-58503054
country:      cn
changed:      bjnic@bjtelecom.net 20040115
mnt-by:       MAINT-CHINATELECOM-BJ
source:       APNIC

05 July:Humour time: Wahyu Inc is a firm in Indonesia. the telephone registered (707) 954-3717 is a lady too who has nothing to with Mr Soloway (opsan news).

What can we assume from this ? easy Bobs seems to have had a sex change, before this it seems he was a Indonesian Lady boy ( a transvestite) called Mr Schmitt where he serviced clients from a hotel in Yermo, CA.

This is the strange world of Bob Soloway, Come back soon to discover what Bobs 'morphed' into next time. Honestly its hard to say this is not fiction (made up) at times. - I mean she's (bob) a Business woman now.

Should we start calling him Roberta Soloway ?

03 July: Up and then Down, Morning breaks and Al yet again id's emailbroadcastcompany.com Bob has a friend (perhaps imaginary) called Shannon Johnson. So hello.

Update: somebody terminated it (23:00 gmt), it will be interesting to see if our Chinese hoster pops up again.

Domain name: emailbroadcastcompany.com

Registrant:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Administrative Contact:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Technical Contact:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Billing Contact:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Record last updated on 2006-06-30 00:00:00
Record created on 2006-06-30 00:00:00
Record expires on 2007-06-30 00:00:00

Domain servers in listed order:
   ns2.dnsuse.info   211.155.132.226
   ns1.dnsuse.info   219.146.57.85

Registration Service Provider: Sun Network
   domain.billing@sun-network.com
   +1 (702)2847493

Registrar: NAMES4EVER, http://www.names4ever.com

Looks like china

<<>> DiG 9.2.4 <<>> emailbroadcastcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3517
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;emailbroadcastcompany.com.     IN      A

;; ANSWER SECTION:
emailbroadcastcompany.com. 3600 IN      A       211.155.132.206

;; AUTHORITY SECTION:
emailbroadcastcompany.com. 16287 IN     NS      ns1.dnsuse.info.
emailbroadcastcompany.com. 16287 IN     NS      ns2.dnsuse.info.

;; ADDITIONAL SECTION:
ns1.dnsuse.info.        32014   IN      A       61.156.8.120
ns2.dnsuse.info.        32014   IN      A       211.155.132.228

and whoopie its China Last seen here 14 June 2006 too. Hello to spammy china.

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

01 July:Happy July 1st, Our green chinese man (image) made an appearance again, Google translate says :

对不起,此网站暂时关闭,请您稍后再来。详细原因请查询...

Sorry, this site is temporarily closed, please come again later. Please detail the reasons enquiries. . .

A big hello to Al over at Opsan for spotting

whois emarketingcorp.cn
Domain Name: emarketingcorp.cn
ROID: 20060516s10001s52771768-cn
Domain Status: ok
Registrant Organization: 第二域名
Registrant Name: 吴东
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: 创联万网国际信息技术（北京）有限公司
Name Server:dns9.hichina.com
Name Server:dns10.hichina.com
Registration Date: 2006-05-16 10:40
Expiration Date: 2007-05-16 10:40

yes thats the we Chinese really do hate spammers, for they they hopefully take Bobs money in advance and then they trash him. Communism has changed, Karl Marx would be spinning in his Highbury cemetery grave 'home'.

dig emarketingcorp.cn

; <<>> DiG 9.2.4 <<>> emarketingcorp.cn
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53074
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;emarketingcorp.cn.             IN      A

;; ANSWER SECTION:
emarketingcorp.cn.      10268   IN      A       218.30.100.92

;; AUTHORITY SECTION:
emarketingcorp.cn.      9230    IN      NS      dns10.hichina.com.
emarketingcorp.cn.      9230    IN      NS      dns9.hichina.com.

;; Query time: 18 msec

Strangely Beijing (thats in China) loves Bob

inetnum:      218.30.96.0 - 218.30.127.255
netname:      CHINANET-IDC-BJ
descr:        CHINANET IDC center
descr:        China Telecom
descr:        Beijing 100088
country:      CN
admin-c:      HC55-AP
tech-c:       HC55-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINATELECOM-BJ
changed:      bjnic@bjtelecom.net 20040322
status:       ALLOCATED NON-PORTABLE
source:       APNIC

person:       Hostmaster of Beijing Telecom corporation CHINA   TELECOM
nic-hdl:      HC55-AP
e-mail:       bjnic@bjtelecom.net
address:      Beijing Telecom
address:      No. 107 XiDan Beidajie, Xicheng District Beijing
phone:        +86-010-58503461
fax-no:       +86-010-58503054
country:      cn
changed:      bjnic@bjtelecom.net 20040115
mnt-by:       MAINT-CHINATELECOM-BJ
source:       APNIC

30 June: After a surprisingly short time of ahem compliants (this was Mr Schmits hotel if my memory is correct) Network solutions pulls the registration. - Everybody loves Bobs spamming

http://www.networksolutions.com
No match for "THEBROADCASTEMAILCORPORATION.COM".

Come back soon and find out what our lovable rogue is pretending to be today, and see Bob promote the american way of life. Observing Bob is much more fun than wondering which z list starlet is going to have a baby in Africa, because its the thing to do this week apparently or something.

28 June:ancestry.com has the american 1930's census data on it, its free, Not many Soloways. Who Appear to be of Russians/Polish descent and thus renamed to Soloway by some immigration officer - pockets of Soloways in New York/West Virgina. Soloways *REGISTRATION REQUIRED ? Mary and Dorothy Soloway names searched on.

24 June:ev1.net repeat offender hoster documented, had a look at this page in internet explorer 6 - my tables suck - strange if your still using Internet explorer please use something better.

23 June: Stu - i wonder what "you decide" Rupert Murdoch's puppet reporters would be 'told to say ?'. Bob had a go here at sub hosting (nanae lead) but thats dead.

22 June:thebroadcastemailcorporation.com seems to be defunct, thats the last known website (to date) Mr Soloway/HerrSchmitt seems to be out of the 'broadcasting' frequencies for the time being, dns works fine for other domains.

dig thebroadcastemailcorporation.com

; <<>> DiG 9.2.4 <<>> thebroadcastemailcorporation.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

hmmm

20 June:broadcastemailcorporation.com now points to http://www.sower.cn/close/ a possible an example of domain knitting? a hosting life of 4 days so far.

dig broadcastemailcorporation.com

; <<> DiG 9.2.4 <<>> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63072
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 3600 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 42971 IN NS      ns2.xinnet.cn.
broadcastemailcorporation.com. 42971 IN NS      ns2.xinnetdns.com.

Domain still exists in whois too sans the 'fancy some spam website' Jury is out on this one on 'Knitting'. Assistance please.

19 June:I don't like Bob Parsons but he raised the point about domain knitting, now whether our friends the Chinese are paying for the domains Bob spamvertises is a valid point for discussion - being that some of these are only a few days in duration, assuming the dns is cached that be quite a few of them.

Its a fraud term (evil thought is Bob Parsons legit?) that never made it too europe, but it seems to be something like the enron scam in action, you take credit on non existant assets for a short term. It reeks of a 'I hate my competition' rant, while Bob tars a lot of his clients with the mark of the spammer recently which a decent technical person should know about.

If so then it does not matter if Bob pays his Chinese pro spam friends or not which from the going on's documented here it appear he does not like a long term relationship with his 'suppliers'. It would be interesting to find out who dumped who first. An observation from the the chinese man in the white hat screenshot it appears that Bob is an 'absent' client.

16 June:web-dateset.com down but Meet broadcastemailcorporation.com

Domain Name:broadcastemailcorporation.com


Registrant:
Wei Yuzhang
        hu bei
        434000
        ·36·


Administrative Contact:
Wei Yuzhang
        Wei Yuzhang
        hu bei
        jin zhou Hubei 434000
        CN
        tel: 86 0716 8560437
        fax: 86 0716 8560437
        ninecat2003@163.com

Technical Contact:
Wei Yuzhang
        Wei Yuzhang
        hu bei
        jin zhou Beijing 434000
        CN
        tel:   8560437
        fax:   8560437
        ninecat2003@163.com

Billing Contact:
Wei Yuzhang
        Wei Yuzhang
        hu bei
        jin zhou Beijing 434000
        CN
        tel:   8560437
        fax:   8560437
        ninecat2003@163.com

 Registration Date: 2006-05-23
       Update Date: 2006-05-23
   Expiration Date: 2007-05-23

    Primary DNS:  ns2.xinnetdns.com             210.51.170.48
  Secondary DNS:  ns2.xinnet.cn         210.51.170.67 

Meet Wei Yuzhang

<<>> DiG 9.2.4 <<>> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31982
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 3600 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 43199 IN NS      ns2.xinnetdns.com.
broadcastemailcorporation.com. 43199 IN NS      ns2.xinnet.cn.

;; ADDITIONAL SECTION:
ns2.xinnet.cn.          7945    IN      A       210.51.170.67
ns2.xinnetdns.com.      35872   IN      A       210.51.170.67

China ? oh yes I guessed correct whoopie!!!

inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

14 June: Meeting old friends, thebroadcastemailcorporation.com is on 211.155.132.206 which is also an old hoster of broadcastemailcorporation.org (terminated 30 May 2006)

web-dateset.com (was 211.155.132.206 - yes China ) seems to be missing the dns has been screwed up by this spammer pal Charles Earle IV, the lession one can draw is only a spammer would do that to another spammer.

6 June: While some think its the beginning of the end today, its a shame the Bible spoke in general terms rather than something like (The spammer called Bob Soloway SHALT RULZE DA EARTH)- I told it was in a early draft. Excuse my humour.

My little spawn of the devil (Bob Soloway) seems to be working with another spamhaus rokso class who answers the the name of 'Charles Earle IV' He lives in Florida so he must be a spammer (link)

My view on this is that it seems credible, but it is a little outside the terms of this page (i deal with Bob, and his domains, rather than the third party spam), when spammers have to get together you know its getting tough.

4 June: new page host http://sjwest01.googlepages.com/broadcastspam.html thanks to freeguestbook.de for the new guestbook

broadcastemailcorporation.org dead but introducing drum roll...... thebroadcastemailcorporation.com and Mr Schmitt is still at the hotel too.

   Domain Name: THEBROADCASTEMAILCORPORATION.COM
   Registrar: NETWORK SOLUTIONS, LLC.
   Whois Server: whois.networksolutions.com
   Referral URL: http://www.networksolutions.com
   Name Server: NS4.DNSUSE.INFO
   Name Server: NS3.DNSUSE.INFO
   Name Server: NS2.DNSUSE.INFO
   Name Server: NS1.DNSUSE.INFO
   Status: REGISTRAR-LOCK
   EPP Status: clientDeleteProhibited
   EPP Status: clientTransferProhibited
   EPP Status: clientUpdateProhibited
   Updated Date: 02-Jun-2006
   Creation Date: 02-Jun-2006
   Expiration Date: 02-Jun-2007



http://www.networksolutions.com


Registrant:
Schmitt, John
   35450 Yermo Road
   Yermo, CA 92398
   US

   Domain Name: THEBROADCASTEMAILCORPORATION.COM

   Administrative Contact, Technical Contact:
      Schmitt, John             
      JohnSchmitt2000@hotmail.com
      35450 Yermo Road
      Yermo, CA 92398
      US
      7602541154

   Record expires on 02-Jun-2007.
   Record created on 02-Jun-2006.
   Database last updated on 4-Jun-2006 10:04:21 EDT.

   Domain servers in listed order:

   NS1.DNSUSE.INFO              61.156.8.120
   NS2.DNSUSE.INFO              211.155.132.228
   NS3.DNSUSE.INFO              71.40.152.91
   NS4.DNSUSE.INFO              71.40.152.83

Where

dig thebroadcastemailcorporation.com

; <<>> DiG 9.2.4 <<>> thebroadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10384
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 3

;; QUESTION SECTION:
;thebroadcastemailcorporation.com. IN   A

;; ANSWER SECTION:
thebroadcastemailcorporation.com. 3600 IN A     211.155.132.206

;; AUTHORITY SECTION:
thebroadcastemailcorporation.com. 2816 IN NS    ns1.dnsuse.info.
thebroadcastemailcorporation.com. 2816 IN NS    ns2.dnsuse.info.
thebroadcastemailcorporation.com. 2816 IN NS    ns3.dnsuse.info.
thebroadcastemailcorporation.com. 2816 IN NS    ns4.dnsuse.info.

;; ADDITIONAL SECTION:
ns1.dnsuse.info.        38242   IN      A       61.156.8.120
ns2.dnsuse.info.        38242   IN      A       211.155.132.228
ns4.dnsuse.info.        38241   IN      A       71.40.152.83

;; Query time: 421 msec

Anti spammers of china rejoice hes hosting in China!!!

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

1 June: 'Mr Schmitt' lives in a Hotel called the Oak Tree Inn - thanks to Sky images here - 2 star hotel description link $75 per night

Registrant:
Schmitt, John
   35450 Yermo Road
   Yermo, CA 92398
   US

   Domain Name: WEB-DATESET.COM

31 May: broadcastemailcorporation.org new hosr

; <<>> DiG 9.2.4 <<>> broadcastemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24056
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailcorporation.org. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.org. 3600 IN  A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailcorporation.org. 2776 IN  NS      ns2.virtualinc.info.

;; ADDITIONAL SECTION:
ns2.virtualinc.info.    40620   IN      A       211.155.132.228

China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

29 May:broadcastemailcorporation.us has a fresh id record its our freind John.

Status:                               clientDeleteProhibited
Domain Status:                               clientTransferProhibited
Domain Status:                               clientUpdateProhibited
Registrant ID:                               WN-R865271575
Registrant Name:                             wujie wujie
Registrant Organization:                     wujie
Registrant Address1:                         SZ
Registrant Address2:                         SZ
Registrant City:                             SZ
Registrant State/Province:                   SZ
Registrant Postal Code:                      518000
Registrant Country:                          Bahamas
Registrant Country Code:                     BS
Registrant Phone Number:                     +86.75525651488
Registrant Facsimile Number:                 +86.75525651488
Registrant Email:                            domain@hostofchina.com
Registrant Application Purpose:              P3
Registrant Nexus Category:                   C31/BS
Administrative Contact ID:                   WN-A865271575
Administrative Contact Name:                 wujie wujie
Administrative Contact Organization:         HOSTOFCHINA
Administrative Contact Address1:             SZ
Administrative Contact Address2:             SZ1604
Administrative Contact City:                 ShenZhen
Administrative Contact State/Province:       GD
Administrative Contact Postal Code:          518000
Administrative Contact Country:              China
Administrative Contact Country Code:         CN
Administrative Contact Phone Number:         +86.75525614031
Administrative Contact Facsimile Number:     +86.75525614031
Administrative Contact Email:                domain@hostofchina.com
Administrative Application Purpose:          P3
Administrative Nexus Category:               C31/BS
Billing Contact ID:                          WN-B865271575
Billing Contact Name:                        HostOfChina.com Webhosting Domain Hostmaster
Billing Contact Organization:                HOSTOFCHINA
Billing Contact Address1:                    SZ
Billing Contact Address2:                    SZ1604
Billing Contact City:                        ShenZhen
Billing Contact State/Province:              GD
Billing Contact Postal Code:                 518000
Billing Contact Country:                     China
Billing Contact Country Code:                CN
Billing Contact Phone Number:                +86.75525614031
Billing Contact Facsimile Number:            +86.75525614031
Billing Contact Email:                       domain@hostofchina.com
Billing Application Purpose:                 P3
Billing Nexus Category:                      C31/BS
Technical Contact ID:                        WN-T865271575
Technical Contact Name:                      HostOfChina.com Webhosting Domain Hostmaster
Technical Contact Organization:              HOSTOFCHINA
Technical Contact Address1:                  SZ
Technical Contact Address2:                  SZ1604
Technical Contact City:                      ShenZhen
Technical Contact State/Province:            GD
Technical Contact Postal Code:               518000
Technical Contact Country:                   China
Technical Contact Country Code:              CN
Technical Contact Phone Number:              +86.75525614031
Technical Contact Facsimile Number:          +86.75525614031
Technical Contact Email:                     domain@hostofchina.com
Technical Application Purpose:               P3
Technical Nexus Category:                    C31/BS
Name Server:                                 NS8.HOSTOFCHINA.COM
Name Server:                                 NS7.HOSTOFCHINA.COM
Created by Registrar:                        WEB COMMERCE COMMUNICATIONS, LTD.
Last Updated by Registrar:                   WEB COMMERCE COMMUNICATIONS, LTD.
Domain Registration Date:                    Mon May 22 03:49:13 GMT 2006
Domain Expiration Date:                      Mon May 21 23:59:59 GMT 2007
Domain Last Updated Date:                    Mon May 22 19:37:47 GMT 2006

27 May: Dead hosts:

http://217.74.161.86/broadcastemail/ (russia)
http://62.193.238.142/broadcastemail/ (France)
http://62.193.224.161/broadcastemail/ (France)


and ??
newportcorporation.net seems dead - or bob 'forgot' to pay the bill - I don't speak Chinese - link looks like a login window. greylines in nanae reports that cyberservices.com (a bob domain mentioned here) is dead or on the move.

26 May: ev1.net refuse to serve broadcastemailcorporation.us

25 May: Meet broadcastemailcorporation.us guess where too

 whois broadcastemailcorporation.us
Domain Name:                                 BROADCASTEMAILCORPORATION.US
Domain ID:                                   D10132463-US
Sponsoring Registrar:                        WEB COMMERCE COMMUNICATIONS, LTD.
Domain Status:                               clientDeleteProhibited
Domain Status:                               clientTransferProhibited
Domain Status:                               clientUpdateProhibited
Registrant ID:                               WN-R865271575
Registrant Name:                             wujie wujie
Registrant Organization:                     wujie
Registrant Address1:                         SZ
Registrant Address2:                         SZ
Registrant City:                             SZ
Registrant State/Province:                   SZ
Registrant Postal Code:                      518000
Registrant Country:                          Bahamas
Registrant Country Code:                     BS
Registrant Phone Number:                     +86.75525651488
Registrant Facsimile Number:                 +86.75525651488
Registrant Email:                            domain@hostofchina.com
Registrant Application Purpose:              P3
Registrant Nexus Category:                   C31/BS
Administrative Contact ID:                   WN-A865271575
Administrative Contact Name:                 wujie wujie
Administrative Contact Organization:         HOSTOFCHINA
Administrative Contact Address1:             SZ
Administrative Contact Address2:             SZ1604
Administrative Contact City:                 ShenZhen
Administrative Contact State/Province:       GD
Administrative Contact Postal Code:          518000
Administrative Contact Country:              China
Administrative Contact Country Code:         CN
Administrative Contact Phone Number:         +86.75525614031
Administrative Contact Facsimile Number:     +86.75525614031
Administrative Contact Email:                domain@hostofchina.com
Administrative Application Purpose:          P3
Administrative Nexus Category:               C31/BS
Billing Contact ID:                          WN-B865271575
Billing Contact Name:                        HostOfChina.com Webhosting Domain Hostmaster
Billing Contact Organization:                HOSTOFCHINA
Billing Contact Address1:                    SZ
Billing Contact Address2:                    SZ1604
Billing Contact City:                        ShenZhen
Billing Contact State/Province:              GD
Billing Contact Postal Code:                 518000
Billing Contact Country:                     China
Billing Contact Country Code:                CN
Billing Contact Phone Number:                +86.75525614031
Billing Contact Facsimile Number:            +86.75525614031
Billing Contact Email:                       domain@hostofchina.com
Billing Application Purpose:                 P3
Billing Nexus Category:                      C31/BS
Technical Contact ID:                        WN-T865271575
Technical Contact Name:                      HostOfChina.com Webhosting Domain Hostmaster
Technical Contact Organization:              HOSTOFCHINA
Technical Contact Address1:                  SZ
Technical Contact Address2:                  SZ1604
Technical Contact City:                      ShenZhen
Technical Contact State/Province:            GD
Technical Contact Postal Code:               518000
Technical Contact Country:                   China
Technical Contact Country Code:              CN
Technical Contact Phone Number:              +86.75525614031
Technical Contact Facsimile Number:          +86.75525614031
Technical Contact Email:                     domain@hostofchina.com
Technical Application Purpose:               P3
Technical Nexus Category:                    C31/BS
Name Server:                                 NS8.HOSTOFCHINA.COM
Name Server:                                 NS7.HOSTOFCHINA.COM
Created by Registrar:                        WEB COMMERCE COMMUNICATIONS, LTD.
Last Updated by Registrar:                   WEB COMMERCE COMMUNICATIONS, LTD.
Domain Registration Date:                    Mon May 22 03:49:13 GMT 2006
Domain Expiration Date:                      Mon May 21 23:59:59 GMT 2007
Domain Last Updated Date:                    Mon May 22 19:37:47 GMT 2006

 dig broadcastemailcorporation.us

; <<>> DiG 9.2.4 <<>> broadcastemailcorporation.us
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23102
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
broadcastemailcorporation.us.  IN      A

;; ANSWER SECTION:
broadcastemailcorporation.us. 43200 IN  A       66.98.168.41

;; AUTHORITY SECTION:
broadcastemailcorporation.us. 43200 IN  NS      ns7.hostofchina.com.
broadcastemailcorporation.us. 43200 IN  NS      ns8.hostofchina.com.

;; ADDITIONAL SECTION:
ns7.hostofchina.com.    43200   IN      A       66.98.168.41
ns8.hostofchina.com.    43200   IN      A       66.98.168.151

OrgName:    Everyones Internet 
OrgID:      EVRY

Address:    390 Benmar
Address:    Suite 200
City:       Houston
StateProv:  TX
PostalCode: 77060
Country:    US

NetRange:   66.98.128.0 - 66.98.255.255 
CIDR:       66.98.128.0/17 
NetName:    EVRY-BLK-14
NetHandle:  NET-66-98-128-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.EV1.NET
NameServer: NS2.EV1.NET
Comment:    
RegDate:    2003-07-02
Updated:    2004-02-06

RTechHandle: RW172-ARIN

RTechName:   Williams, Randy 
RTechPhone:  +1-713-579-2850
RTechEmail:  admin@ev1.net 

OrgAbuseHandle: ABUSE477-ARIN
OrgAbuseName:   ABUSE 
OrgAbusePhone:  +1-713-579-2850
OrgAbuseEmail:  abuse@ev1.net

OrgNOCHandle: NOC1445-ARIN
OrgNOCName:   NOC 
OrgNOCPhone:  +1-713-579-2850
OrgNOCEmail:  noc@ev1.net

OrgTechHandle: RW172-ARIN
OrgTechName:   Williams, Randy 
OrgTechPhone:  +1-713-579-2850
OrgTechEmail:  admin@ev1.net

OrgTechHandle: VST3-ARIN
OrgTechName:   Stinson, Valarie 
OrgTechPhone:  +1-713-579-2850
OrgTechEmail:  admin2@ev1.net

# ARIN WHOIS database, last updated 2006-05-24 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

24 May: I have a guestbook spammer selling some drug or other who likes the new design - well its a compliment from the other side.

23 May: Another spam from a related Domain hes spamming from Brazil, - Bob may think he has list washed us, but there are other domains i care for, and his efforts to stay under my radar are only partially successfull,

Most of this pages validates as xhtml 1.0 transitional - any bugs are the additional shit yahoo sticks on the page, Objective is to thank 'Circle of Friends' for stealing the page design concept - hopefully the css and html should not give internet explorer users any gpf's , and perhaps run a spell check on the page soon (a major task).

Comments welcome if it does murder Internet explorer in use, not much of a 'windows' shop. As to the size of quarter pounder not sure what i can do. I am advised we could iframe and do sections in other html files, but that might break strict xhtml in the future.

I'd not image that i'd have an 164 indictment of Bob Soloway as a pet hobby, but 'a dogs not for christmas its for life.' As those animal rights nutcases tell us. - I need a vet to put down 'Bob'. Its a shame nobody in washington state in authority wants to do anything and rather pass him about.

As Shakespear wrote (or stole): Revenge is dish best served cold.

21 May: Meet John Schmitt - Bob Soloway it seems

   Domain Name: WEB-DATESET.COM
   Registrar: NETWORK SOLUTIONS, LLC.
   Whois Server: whois.networksolutions.com
   Referral URL: http://www.networksolutions.com
   Name Server: NS4.DNSUSE.INFO
   Name Server: NS3.DNSUSE.INFO
   Name Server: NS2.DNSUSE.INFO
   Name Server: NS1.DNSUSE.INFO
   Status: REGISTRAR-LOCK
   EPP Status: clientDeleteProhibited
   EPP Status: clientTransferProhibited
   EPP Status: clientUpdateProhibited
   Updated Date: 19-Feb-2006
   Creation Date: 19-Feb-2006
   Expiration Date: 19-Feb-2007

http://www.networksolutions.com


Registrant:
Schmitt, John
   35450 Yermo Road
   Yermo, CA 92398
   US

   Domain Name: WEB-DATESET.COM

   Administrative Contact, Technical Contact:
      Schmitt, John             JohnSchmitt2000@hotmail.com
      35450 Yermo Road
      Yermo, CA 92398
      US
      7602541154

   Record expires on 19-Feb-2007.
   Record created on 19-Feb-2006.
   Database last updated on 21-May-2006 19:08:05 EDT.

   Domain servers in listed order:

   NS1.DNSUSE.INFO              61.156.8.120
   NS2.DNSUSE.INFO              211.155.132.228
   NS3.DNSUSE.INFO              71.40.152.91
   NS4.DNSUSE.INFO              71.40.152.83


dig web-dateset.com

; <DiG 9.2.4 > web-dateset.com
;; global options:  printcmd
;; Got answer:
;; -> HEADER - opcode: QUERY, status: NOERROR, id: 18156
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 2

;; QUESTION SECTION:
;web-dateset.com.               IN      A

;; ANSWER SECTION:
web-dateset.com.        3600    IN      A       211.155.132.206

;; AUTHORITY SECTION:
web-dateset.com.        43017   IN      NS      ns4.dnsuse.info.
web-dateset.com.        43017   IN      NS      ns1.dnsuse.info.
web-dateset.com.        43017   IN      NS      ns2.dnsuse.info.
web-dateset.com.        43017   IN      NS      ns3.dnsuse.info.

;; ADDITIONAL SECTION:
ns1.dnsuse.info.        43017   IN      A       61.156.8.120
ns4.dnsuse.info.        43017   IN      A       71.40.152.83

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast &  TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

email advertise your web site to 8,000,000 people for free
http://www.web-dateset.com/hello.html

this non-commercial offer is solely intended for non-commercial 
charities only.  press charity info option on site for details.
this email offer is not a commercial service for sale/lease/trade.

Domain ID:D122755898-LROR
Domain Name:BROADCASTEMAILCORPORATION.ORG
Created On:19-May-2006 22:13:31 UTC
Last Updated On:19-May-2006 22:13:35 UTC
Expiration Date:19-May-2007 22:13:31 UTC
Sponsoring Registrar:Network Solutions LLC (R63-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:40448377-NSI
Registrant Name:John Schmitt
Registrant Street1:35450 Yermo Road
Registrant Street2:
Registrant Street3:
Registrant City:Yermo
Registrant State/Province:CA
Registrant Postal Code:92398
Registrant Country:US
Registrant Phone:+1.7602541154
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:JohnSchmitt2000@hotmail.com
Admin ID:40448377-NSI
Admin Name:John Schmitt
Admin Street1:35450 Yermo Road
Admin Street2:
Admin Street3:
Admin City:Yermo
Admin State/Province:CA
Admin Postal Code:92398
Admin Country:US
Admin Phone:+1.7602541154
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:JohnSchmitt2000@hotmail.com
Tech ID:40448377-NSI
Tech Name:John Schmitt
Tech Street1:35450 Yermo Road
Tech Street2:
Tech Street3:
Tech City:Yermo
Tech State/Province:CA
Tech Postal Code:92398
Tech Country:US
Tech Phone:+1.7602541154
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:JohnSchmitt2000@hotmail.com
Name Server:NS2.DNSUSE.INFO
Name Server:NS3.DNSUSE.INFO
Name Server:NS1.DNSUSE.INFO
Name Server:NS4.DNSUSE.INFO

dig broadcastemailcorporation.org

;  DiG 9.2.4  broadcastemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER opcode: QUERY, status: NOERROR, id: 26375
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 3

;; QUESTION SECTION:
;broadcastemailcorporation.org. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.org. 3600 IN  A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailcorporation.org. 768 IN   NS      ns2.virtualinc.info.

;; ADDITIONAL SECTION:
ns2.virtualinc.info.    770     IN      A       211.155.132.227
ns2.virtualinc.info.    770     IN      A       211.155.132.228
ns2.virtualinc.info.    770     IN      A       211.155.132.206

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast &  TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

20 May: http://www.broadcastemailingcorp.cn/ is dead The (second hand news) French website is hijacked from these people http://62.193.224.161/broadcastemail/ = http://cnpmusic.com/broadcastemail/

Parsing input: cnpmusic.com
Host cnpmusic.com (checking ip) = 62.193.224.161
host 62.193.224.161 (getting name) = wpc0225.amenworld.com.
Using abuse net on abuse@amenworld.com
abuse net amenworld.com = postmaster@amen.fr, abuse@amen.fr
http://support.amenworld.com/contact/information.php

Registrant: ( http://www.cnpmusic.com )
CNPMUSIC
119 Chemin Des Vergers
BAR SUR LOUP 06620
FR

Domain Name: CNPMUSIC.COM

Administrative Contact:
CNPMUSIC e.boell@free.fr
119 Chemin Des Vergers
BAR SUR LOUP 06620
FR
+33493429679

Technical Contact:
AMEN.FR internic@amen.fr
12-14, Rond Point des Champs Elysees
Paris, France 75008
FR
+33 892 55 66 77

Record expires on 29-Dec-2006.
Record created on 29-Dec-2000.
Database last updated on 15-May-2006 18:07:43 EDT.
http://www.cnpmusic.com/index2.php?page=contact

dig newportcorporation.net
;; QUESTION SECTION:
;newportcorporation.net.                IN      A

;; AUTHORITY SECTION:
newportcorporation.net. 60      IN      SOA     peanutmail.newpeanut.idc. admin.newpeanut.idc. 16 900 600 86400 3600
 
 whois newportcorporation.net

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: NEWPORTCORPORATION.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.OnlineNIC.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS2.ORAY.NET
   Name Server: NS1.ORAY.NET
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 10-Apr-2006
   Creation Date: 10-Apr-2006
   Expiration Date: 10-Apr-2007

Registrant:
         WANG nbcm@163.com +86.75557429836
         WANG
         JINGZHOU
         JINGZHOU,HUBEI,CHINA 434010


Domain Name:newportcorporation.net
Record last updated at 2006-04-10 04:37:05
Record created on 2006/4/10
Record expired on 2007/4/10


Domain servers in listed order:
         ns1.oray.net    ns2.oray.net

Administrator:
         JINGZHOU
         JINGZHOU
HUBEI,
CHINA
 434010

         name:(WANG)
mail:(nbcm@163.com) +86.75557429836
         WANG
Technical Contactor:
         890,North Tianhe Road
         Guangzhou
Guangdong,
CHINA
 510620

         name:(RadiumHuang)
mail:(radium@vavic.com) +86.2087568999
         Vavic Network Technology Co.,Tld.
Billing Contactor:
         890,North Tianhe Road
         Guangzhou
Guangdong,
CHINA
 510620

         name:(RadiumHuang)
mail:(radium@vavic.com) +86.2087568999
         Vavic Network Technology Co.,Tld.

New page design, Ive tried to stop the tables from sucking as much but without losing some of the detail its not going to print that well. Google page each might not work either, Bable fish not test ok either it might complain theres too much on the page. xhtml will come

14 May: Quiet here (no Bob spam) An interesting url from the the BBB.org http://www.thebbb.org/commonreport.html?bid=22009796

Marketplace Experience 
 

Based on BBB files, this company has an unsatisfactory record
BBB Definition: 
 
unsatisfactory  record - 
A company has an "unsatisfactory business 
performance record" with the
Bureau is based on the experiences reflected 
in BBB files. This file
condition results when the company has failed 
to resolve or respond to
complaints, repeatedly failed to respond or 
resolve issues in a timely
manner, failed to resolve the underlying 
issues for a pattern

BBB Definition: pattern - More
than 2 complaints involving the same allegations usually within 12
months that are significant in relation to the company's size and
volume of business. of
complaints, failed to honor their commitment to mediate or arbitrate
disputes or honor mediated agreements or arbitrated decisions, failed
to substantiate, modify or discontinue false advertising claims that
are challenged by the BBB, or failed to discontinue unauthorized use of
the BBB name and logo, a Federally protected trademark. with the  
Bureau due to failure to respond to one or more complaints and or two or  
more otherwise  unresolved BBB Definition: 
 unresolved - The company failed to resolve the complaint issues. complaints.

more news from http://blog.opsan.com/archive/2005/07/29/1148.asp new domain for our cheeky spammer (its great to be a chinese citizen)

Parsing input: http://www.broadcastemailingcorp.cn/
Host www.broadcastemailingcorp.cn (checking ip) = 218.244.140.39 > abuse@hichina.com

Registrant Organization: ????
Registrant Name: ??
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: ??????????(??)????
Name Server:dns9.hichina.com
Name Server:dns10.hichina.com
Registration Date: 2006-05-11 11:26
Expiration Date: 2007-05-11 11:26
inetnum: 218.244.128.0 - 218.244.159.255
netname: HICHINA
country: CN
descr: 3/F,HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District, Beijing 100011,China
admin-c: ZX103-AP
tech-c: ZX163-AP
status: ALLOCATED PORTABLE
changed: shenzhi@cnnic.cn 20050606
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Zhang Xiangdong
nic-hdl: ZX103-AP
e-mail: abuse@hichina.com
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
phone: +86-10-64242299-8602
fax-no: +86-10-64242299-8354
country: CN
changed: ipas@cnnic.net.cn 20050413
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Song Yingqiao
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
country: CN
phone: +86-10-64242299-8328
fax-no: +86-10-64242299-8354
e-mail: songyq@hichina.com
nic-hdl: ZX163-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20050413
source: APNIC

inetnum: 218.244.128.0 - 218.244.159.255
netname: HICHINA
country: CN
descr: 3/F,HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District, Beijing 100011,China
admin-c: ZX103-CN
tech-c: ZX163-CN
status: ALLOCATED PORTABLE
changed: shenzhi@cnnic.cn 20050606
mnt-by: MAINT-CNNIC-AP
source: CNNIC

person: Zhang Xiangdong
nic-hdl: ZX103-CN
e-mail: abuse@hichina.com
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
phone: +86-10-64242299-8602
fax-no: +86-10-64242299-8354
country: CN
changed: ipas@cnnic.net.cn 20050413
mnt-by: MAINT-CNNIC-AP
source: CNNIC

person: Song Yingqiao
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
country: CN
phone: +86-10-64242299-8328
fax-no: +86-10-64242299-8354
e-mail: songyq@hichina.com
nic-hdl: ZX163-CN
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20050413
source: CNNIC

> How those Chinese hate spam ....

Blonde reports

"The person that returned my call was friendly until I explained I'd not received my package, then immediately turned kinda rude. Told me to email support at newportcorp@mailshack.com.

Then it occured to me that the number on the caller id was Robert Soloway, (I'm a little slow catching on sometimes) so I asked the guy why the number was listed as Robert Soloway instead of Newport Broadcasting. He hung up on me."

> And rude to a customer .... - oh my He seems to be using http://62.193.224.161/broadcastemail/ (old style site - FRANCE) for specials, These guys 62.193.224.0 - 62.193.239.255 AMEN-EUROPE-NETWORK abuse@amenworld.com seem to like him (2nd ip)

inetnum: 62.193.224.0 - 62.193.239.255 
netname: AMEN-EUROPE-NETWORK 
descr: AMEN European Network 
descr: For Spam/Abuse requests please send mail to abuse@amenworld.com 
country: FR 
admin-c: AN1108-RIPE 
tech-c: AN910-RIPE 
status: ASSIGNED PA  
mnt-by: AMEN-MNT 
mnt-lower: AMEN-MNT 
mnt-routes: AMEN-MNT 
rev-srv: ns1.amenworld.com 
rev-srv: ns2.amenworld.com 
source: RIPE # Filtered 

role: AMEN NOC 
address: AMEN - Agence des Medias Numeriques 
address: 12/14, rond-point des champs elysees 
address: 75008 Paris, France 
phone: +33 8 92 55 66 77 
e-mail: abuse@amen.fr 
nic-hdl: AN910-RIPE 
admin-c: JD2263-RIPE 
tech-c: AN1018-RIPE 
tech-c: AN1019-RIPE 
mnt-by: AMEN-MNT 
source: RIPE # Filtered 

person: Gorun RENAULT 
address: AMEN - Agence des Medias Numeriques 
address: 12/14, rond-point des champs elysees 
address: 75008 Paris, France 
phone: +33 8 92 55 66 77 
fax-no: +33 1 40 87 76 89 
e-mail: gorun.renault@amen.fr 
nic-hdl: AN1108-RIPE 
mnt-by: AMEN-MNT 
source: RIPE # Filtered 

% Information related to '62.193.224.0/22AS28677'

route: 62.193.224.0/22 
descr: AMEN Networks 
origin: AS28677 
mnt-by: AMEN-MNT 
source: RIPE # Filtered 

1 May: April was 'interesting' Three Soloway hosts down

http://210.7.70.150/broadcastemail/ (india) 
http://broad.1122.ish.cn/  
jzgx.nydns.cn/ 

I expect some movement on Bob 'bulking up' on hostnames soon - the india host stopped responding after two months - seems rather spam friendly that indian isp , that is unless the rumours about spammer Ralsky come true. Our friends the French still seem to be clueless but then again the french with computers seems plain strange.

I will continue to mirror this page just in case a repeat of April happens again.

22 April: Funny things a happening and not just here

Just in case you think I'm the only one complaining or documenting mr soloway I'm not - blog.opsan.com (mentioned before) got an honourable mention in a recent Bob Soloway spam run as an 'impediment to him spamming' - the site above has a proper comment system rather than my sorry yahoo guestbook. Despite this being a boring webpage i try and verify the info i get, I got an above average page hit rate to in April over easter, make of that what you will.

From that site: Acebirddog reports that Bobs 'spam me forever lists' - have been sold to he thinks to phishers who if you dont know are those very nice people who ask you for your id just before they raid your bank account - A casual glance at the spam I saved (all three experiments 'evidence') show that I've won the lottery, had 419 scams etc although low in number compared to drugs and software spam I got so I'm sure pointing a finger to Bob Soloway could not be too hard .

While I'd not say he did (having not seen it), I'm sure he could have, alas my spam filtering is vicious, and with Max (mentioned elsewhere) not helping I pass this bit of info on. Effective sales leads are targeted to people, just becuase you have an contact means there is a duty of care how you treat it - for instance you would not sell the list of mafia informers to the mafia.

The 'duty of care' never existed as far as I'm concerned - client case studies whatever (and not written by me) can be found throughout this document.

20 April: New Chinese domain reported hosting Mr Spam (no China really is 'anti spam') Mirror of this page also setup, If China is 'anti spam' then G.W Bush, and all members of the Chinese communist party and the new german Pope are homosexuals.

Couple of Chinese terminations reported (or did Bob fail to pay the bill ?)

Meet jzgx.nydns.cn (thanks to Tomez)

nydns.cn
Domain Name: nydns.cn
ROID: 20050414s10001s06775213-cn
Domain Status: ok
Registrant Organization: 楠羽网络科技公司
Registrant Name: 王洪羽
Administrative Email: why_119@tom.com
Sponsoring Registrar: 北京新网数码信息技术有限公司
Name Server:ns.xinnetdns.com
Name Server:ns.xinnet.cn
Registration Date: 2005-04-14 16:12
Expiration Date: 2007-04-14 16:12

inetnum: 60.16.0.0 - 60.23.255.255 
netname: CNCGROUP-LN 
country: CN 
descr: CNCGROUP Liaoning province network 
admin-c: CH455-AP 
tech-c: GZ84-AP 
status: ALLOCATED PORTABLE 
mnt-by: APNIC-HM 
mnt-lower: MAINT-CNCGROUP-LN 
mnt-routes: MAINT-CNCGROUP-RR 
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
remarks: This object can only be updated by APNIC hostmasters. 
remarks: To update this object, please contact APNIC 
remarks: hostmasters and include your organisation's account 
remarks: name in the subject line. 
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
changed: hm-changed@apnic.net 20040416 
changed: hm-changed@apnic.net 20060124 
source: APNIC 

route: 60.16.0.0/13 
descr: CNC Group CHINA169 Liaoning Province Network 
country: CN 
origin: AS4837 
mnt-by: MAINT-CNCGROUP-RR 
changed: abuse@cnc-noc.net 20060118 
source: APNIC 

role: CNCGroup Hostmaster 
e-mail: abuse@cnc-noc.net 
address: No.156,Fu-Xing-Men-Nei Street, 
address: Beijing,100031,P.R.China 
nic-hdl: CH455-AP 
phone: +86-10-82993155 
fax-no: +86-10-82993102 
country: CN 
admin-c: CH444-AP 
tech-c: CH444-AP 
changed: abuse@cnc-noc.net 20041119 
mnt-by: MAINT-CNCGROUP 
source: APNIC 

person: Guangyu Zhan 
nic-hdl: GZ84-AP 
e-mail: abuse@online.ln.cn 
address: DATA Communication Bureau of Liaoning Province,China 
address: 38 Lianhe Road,Dadong District Shenyang 110044,China 
phone: +86-24-22800096 
fax-no: +86-24-22800368 
country: CN 
changed: zhangy@lntelecom.com 20030122 
mnt-by: MAINT-CNCGROUP-LN 
source: APNIC 

15 April: We where popular the last couple of days

Alas geocities stats are not very good but it seems that 26 browsers tried over and over again to access this page for every hour, - So I'm assuming it Bob and his 'army' of spambot pc's. I see no refering url or page of entry so perhaps i can now infer to you that Bob is ddosing geocities now ?.

Does that mean his geocites redirect days are over ? time will tell

Geocities got fed up and blocked the ip's it seems.

12 April: No eu activity activity yet, quite on the spam front too.

Tomez (report to nanae) discovers newportcorp.cn - guess where

inetnum: 222.208.0.0 - 222.215.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: China

Let see whois at whois.cnnic.net.cn:

Domain Name: newportcorp.cn
ROID: 20060330s10001s47212991-cn
Domain Status: ok
Registrant Organization: ????
Registrant Name: ??
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: ??????????????????
Name Server: dns9.hichina.com [218.30.103.100]
Name Server: dns10.hichina.com [218.244.143.64]
Registration Date: 2006-03-30 11:21
Expiration Date: 2007-03-30 11:21

See also:
only4testinter.vicp.net IP 222.210.196.86
ns2.vicp.net [210.51.180.211]
ns1.vicp.net [202.105.21.217]

only4testinter.vicp.net has no MX records -> vicp.net has no MX records

Let see whois:
Registrar: ONLINENIC, INC.

Registrant:
ORAY Network Resource Co., Ltd. domainreg@oray.net +86.2061073333
Vavic Network Technology, Inc. 1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655P.R.C
Guangzhou,Guangdong,CN 510655

Domain Name: vicp.net
Record last updated at 2006-02-16 23:44:34
Record created on 2001/8/15
Record expired on 2011/8/15

Domain servers in listed order:
ns1.vicp.net ns2.vicp.net

Administrator:
Name-- Vavic Network Technology, Inc.
EMail-: (domainreg@oray.net)
tel --: +86.2061073333
org: Vavic Network Technology, Inc.
1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655P.R.C
Guangzhou,Guangdong,CN 510655

Technical Contactor:
Name-- Vavic Network Technology, Inc.
EMail-: (domainreg[]oray.net)
tel --: +86.2061073333
org: Vavic Network Technology, Inc.
1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655 P.R.C
Guangzhou,Guangdong,CN 510655

Billing Contactor:
Name-- Vavic Network Technology, Inc.
EMail-: (domainreg@oray.net)
tel --: +86.2061073333
org: Vavic Network Technology, Inc.
1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655P.R.C
Guangzhou,Guangdong,CN 510655

See original spam in sightings:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/936e3d380c28c656

And see also DNS dnsfamily.com used by Soloway for
nebc.dazh.cn IP 220.166.64.52 (at CHINANET-SC)

ns2.dnsfamily.com [218.107.216.80]
(at CNCNET-CN / dns-xm1.fjxm.cncnet.net)
ns1.dnsfamily.com [218.85.132.246]
(at CHINANET-FJ / dns.fz.fj.cn)

Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name: dnsfamily.com

DNS Servers:
NS1.4EVERDNS.COM 218.5.77.19
NS2.4EVERDNS.COM 61.151.252.240
NS1.DNSFAMILY.COM 218.85.132.246
NS2.DNSFAMILY.COM 218.107.216.80

Registrant:
huiyu chen
xiamen
361004

Administrative Contact:
huiyu chen
huiyu chen
xiamen
xiamen Fujian 361004
China
tel: 86 596 6637835
fax: 86 596 6637835
kittyyuc@hotmail.com

Technical Contact:
huiyu chen
huiyu chen
xiamen
xiamen Fujian 361004
China
tel: 86 596 6637835
fax: 86 596 6637835
kittyyuc@hotmail.com

Billing Contact:
huiyu chen
huiyu chen
xiamen
xiamen Fujian 361004
China
tel: 86 596 6637835
fax: 86 596 6637835
kittyyuc@hotmail.com

Registration Date: 2006-01-09
Update Date: 2006-03-02
Expiration Date: 2007-01-09

Primary DNS: ns1.DNSFAMILY.com 218.85.132.246
Secondary DNS: ns2.DNSFAMILY.com 218.107.216.80

See original spam in sightings:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1a28a5ee6aa40155